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Introduction 



In This Welcome to the HP StorageWorks Enterprise File Services WAN Accelerator 

Introduction installation and Configuration Guide. Read this introduction for an overview of 

the information provided in this guide and for an understanding of the 
documentation conventions used throughout. This introduction contains the 
following sections: 

♦ "About This Guide," next 

♦ "Hardware and Software Dependencies" on page 8 

♦ "Ethernet Network Compatibility" on page 8 

♦ "Antivirus Compatibility" on page 8 

♦ "Additional Resources" on page 9 

♦ "Safety Guidelines" on page 10 

♦ "Contacting HP" on page 1 1 



About This Guide 

The HP StorageWorks Enterprise File Services WAN Accelerator Installation and 
Configuration Guide describes how to install and configure the HP 
StorageWorks Enterprise File Services WAN Accelerator. 



TypSS of US6rS This guide is written for storage and network administrators with familiarity 

administering and managing networks using Common Internet File System 
(CIFS), Hyper Text Transport Protocol (HTTP), File Transfer Protocol (FTP), 
and Microsoft Exchange. 



The HP StorageWorks Enterprise File Services WAN Accelerator Installation and 
Configuration Guide includes the following chapters: 

♦ Chapter 1, "Overview of the HP EES WAN Accelerator," introduces the 
HP EFS WAN Accelerator. 

♦ Chapter 2, "Installing and Configuring the HP EFS WAN Accelerator," 
describes how to install and configure the HP EFS WAN Accelerator. 
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Organization of 
This Guide 



♦ Chapter 3, "Advanced Network Deployments," describes advanced 
network configurations and outlines the basic steps for deploying them. 

♦ Chapter 5, "Replacing HP EPS WAN Accelerator Components," describes 
how to replace HP EPS WAN Accelerator hard-disk drives and power 
supply units. 

♦ Appendix A, "Technical Specifications and Regulatory Information," 
provides product technical specifications, environmental specifications, 
and regulatory information for the HP EPS WAN Accelerator. 

♦ Appendix B, "HP EPS WAN Accelerator Ports," provides a list of default 
ports, and interactive and secure ports automatically forwarded by the 
HP EPS WAN Accelerator. 

♦ Appendix C, "Software Licenses," provides the copyright material and 
license agreements for the software used in the development of the HP 
EPS WAN Accelerator software. 

A glossary of terms follows the chapters, and a comprehensive index directs 
you to areas of particular interest. 



Document This manual uses the following standard set of typographical conventions to 

Conventions introduce new terms, illustrate screen displays, describe command syntax. 



and so forth. 



Convention 


Meaning 


italics 


Within text, new terms and emphasized words appear in 




italics. 


boldface 


Within text, commands, keywords, identifiers (names of 




classes, objects, constants, events, functions, program 




variables), environment variables, filenames. Graphical User 




Interface (GUI) controls, and other similar terms appear in 




boldface typeface. 
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Convention 


Meaning 


Courier 


Information displayed on your terminal screen and 




information that you are instructed to enter appear in a 




Courier typeface. 


KEYSTROKE 


Keys that you are to press appear in uppercase letters in 




Helvetica font. 


< > 


vviTRiR byriTdx cicbcripnorib/ vdiucb tnat you, bpcciiy appear iri 




angle brackets. For example: 




interface <ipaddress> 


r 1 

L J 


vviLiiiii ayiiLciA ucai_iiL/Lnjiia/ OL/iioiidi J^cy wuiub oi vaiiduicb 




appear in brackets. For example: 




ntp peer <addr> [version <number>] 


{} 


Within syntax descriptions, required keywords or variables 




appear in braces. For example: 




{delete <filename> | upload <filename>} 



Within syntax descriptions, the pipe symbol represents a 
choice to select one ke3rword or variable to the left or right of 
the symbol. (The keyword or variable can be either optional 
or required.) For example: 
{delete <filename> | upload <filename>} 
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Hardware and Software Dependencies 

The following table summarizes the hardware and software requirements for 
the HP EPS WAN Accelerator. 



HP Component 


Hardware and Software Requirements 


HP EES WAN Accelerator 


• 19 inch (483 mm) two or four-post rack. 


HP EES WAN Accelerator 
Management Console, HP 
StorageWorks Enterprise File 
Services WAN Accelerator 
Manager 


• Any computer that supports a Web browser 
with color image display. 

• The Management Console has been tested 
with Mozilla, version, 1.2.1 and Microsoft 
Internet Explorer version 6. Ox. 

NOTE: Javascript and cookies must be enabled 
in your Web browser. 





Ethernet Network Compatibility 



The HP EPS WAN Accelerator supports the following types of Ethernet 
networks: 

♦ Past Ethernet (IEEE 802.3u 100BaseTX) 

♦ Gigabit Ethernet over Copper (IEEE 802.3ab lOOOBase-T) 

In-path HP EPS WAN Accelerator ports are Past Ethernet auto-sensing. 

The NICl (Primary) port in the HP EPS WAN Accelerator is 10/100/1000 
Mbps auto-sensing. The HP EPS WAN Accelerator supports Jumbo Prames. 

The HP EPS WAN Accelerator supports VLAN 802.1q. The HP EPS WAN 
Accelerator does not support the Cisco InterSwitch Link (ISL) protocol. 



Antivirus Compatibility 

The HP EPS WAN Accelerator has been tested with the following antivirus 
software with no impact on performance: 

♦ Network Associates (McAfee) VirusScan 7.0.0 Enterprise on the server 

♦ Network Associates (McAfee) VirusScan 7.1.0 Enterprise on the server 

♦ Network Associates (McAfee) VirusScan 7.1.0 Enterprise on the client 

♦ Symantec (Norton) Antivirus Corporate Edition 8.1 on the server 

The HP EPS WAN Accelerator has been tested with the following antivirus 
software with a noticeable to moderate impact on performance: 

♦ P-Secure Anti- Virus 5.43 on the client 
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♦ F-Secure Anti- Virus 5.5 on the server 

♦ Network Associates (McAfee) NetShield 4.5 on the server 

♦ Network Associates VirusScan 4.5 for multi-platforms on the client 

♦ Symantec (Norton) Antivirus Corporate Edition 8.1 on the client 



Additional Resources 

This section describes the following resources that supplement the 
information in this guide: 

♦ Release notes 

♦ Related HP documentation 

♦ Related technical reference books 



You can access the complete document set for the HP EPS WAN Accelerator 
from the documentation set CD-ROM: 

♦ HP EPS WAN Accelerator Management Console User's Guide describes how 
to manage and administer an HP EPS WAN Accelerator using the 
Management Console. 

♦ HP EPS WAN Accelerator Command-Line Interface Reference Manual is a 
reference manual for the HP EPS WAN Accelerator command-line 
interface. It lists commands, syntax, parameters, and example usage. 

♦ HP StorageWorks Enterprise File Services WAN Accelerator Manager User's 
Guide describes how to install, configure, and administer a network made 
up of multiple HP EPS WAN Accelerators using the HP StorageWorks 
Enterprise File Services WAN Accelerator Manager. 

The HP EPS WAN Accelerator documentation set is periodically updated with 
new information. To access the most current version of the HP EPS WAN 
Accelerator documentation and other technical information, consult the HP 
technical support site located at http://www.hp.com. 

To learn more about network administration, consult the following books: 

♦ Microsoft Windows 2000 Server Administrator's Companion by Charlie 
Russell and Sharon Crawford (Microsoft Press, January 2000) 

♦ Common Internet Pile System (CIPS) Technical Reference by the Storage 
Networking Industry Association (Storage Networking Industry 
Association, 2002) 

♦ TCP/IP Illustrated, Volume I, The Protocols by W. R. Stevens (Addison- 
Wesley, 1994) 

♦ Internet Routing Architectures (2nd Edition) by Bassam Halabi (Cisco Press, 
2000) 
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Related HP 
Documentation 



Online 

Documentation 



Related 
Reading 



Safety Guidelines 



Follow these safety precautions when installing and setting up your 
equipment. 



IMPORTANT: Failure to follow these safety guidelines can result in injury or damage 
to the HP EPS WAN Accelerator. Mishandling of the HP EPS WAN Accelerator voids 
all warranties. Please read and follow safety guidelines and installation instructions 
carefully. 



EC| U iprn6nt FoIIow these safety guidelines when you install, setup, or remove components 

Guid6linGS wan Accelerator: 

♦ Follow all caution and warning instructions in this manual and marked 
on the equipment. 

♦ Do not block or cover the openings to the HP EFS WAN Accelerator. Do 
not install the HP EFS WAN Accelerator in or near a plenium, air duct, 
radiator, or heat register. 

♦ Do not make mechanical modifications to the HP EFS WAN Accelerator. 
HP is not responsible for the regulatory compliance of HP equipment that 
has been modified. 

♦ Make sure that the area in which you install the HP EFS WAN Accelerator 
is properly ventilated and climate-controlled. For detailed information 
regarding environmental requirements, see Appendix A, "Technical 
Specifications and Regulatory Information." 

♦ Use caution when you remove or replace system components; they can 
become hot to the touch. 

♦ Ensure that the voltage and frequency of your power source match the 
voltage and frequency inscribed on the electrical rating label of the 
equipment. 

♦ Never push objects of any kind through openings in the equipment. 
Dangerous voltages can be present. Conductive foreign objects could 
produce a short circuit and cause fire, electric shock, or damage to your 
equipment. 

♦ The HP ProLiant DL380-3010 and DL380-5010 can weigh up to 60 pounds 
(27.22 kg), and the HP ProLiant DL320-510, DL320-1010, and DL320-2010 
can weigh up to 37 pounds (16.78 kg). Lift the HP EFS WAN Accelerator 
using both hands and with your knees bent. 

♦ The HP EFS WAN Accelerator might have more than one power cord. To 
reduce the risk of electrical shock, disconnect all power cords before 
servicing the appliance. 

Rack Guidelines Prior to installing the HP EFS WAN Accelerator in a rack, adhere to the 

following rack installation guidelines: 
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♦ The rack cannot have solid or restricted airflow doors. You must use a 
mesh door on the front and back of the rack or remove the doors to ensure 
adequate air flow to the system. 

♦ Use a two or four post mounting rack. 

♦ The rack width and depth must allow for proper serviceability and cable 
management. 

♦ Make sure the rack is properly secured to the floor or ceiling. 



IMPORTANT: Please ensure that there is adequate airflow in the rack. Improper 
installation or restricted airflow can damage the equipment. 



Contacting HP 

This section describes how to contact departments within HP. 



NOTE: Do not load any other software on your HP StorageWorks EPS WAN 
Accelerator, as doing so will void your support agreement and you will not be 
able to receive HP technical support. 



Telephone numbers for worldwide technical support are listed on the 
following HP web site: http://www.hp.com/support . From this web site, select 
the country of origin. For example, the North American technical support 
number is 800-633-3600. 



NOTE: For continuous quality improvement, calls may be recorded or monitored. 



Be sure to have the following information available before calling: 

♦ Technical support registration number (if applicable) 

♦ Product serial numbers 

♦ Product model names and numbers 

♦ Applicable error messages 

♦ Operating system type and revision level 

♦ Detailed, specific questions 
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Technical 
Support 



HP Storage Web Site 



The HP web site has the latest mformation on this product, as well as the latest 
drivers. Access the storage site at: http : / / www.hp .com / country / us / eng / 
prodserv/storage.html . From this web site, select the appropriate product or 
solution. 



HP NAS Services Web Site 

The HP NAS Services site allows you to choose from convenient HP Care Pack 
Services packages or implement a custom support solution delivered by HP 
ProLiant Storage Server specialists and /or our certified service partners. For 
more information see us at http:/ /www.hp. com/hps/storage/ns nas.html . 
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Overview of the HP EPS WAN 
Accelerator 



In This Chapter This chapter provides an overview of the HP EPS WAN Accelerator. This 

chapter includes the following sections: 

♦ "Overview of the HP EPS WAN Accelerator" next 



Overview of the HP EFS WAN Accelerator 

The HP EPS WAN Accelerator uses scalable data referencing (SDR) and 
transaction prediction to optimize throughput and save bandwidth on Wide 
Area Networks (WANs). With the HP EPS WAN Accelerator, you can improve 
the performance of your applications without interfering with your existing 
systems. 



Definition of 
Terms 



The following terms are used to describe features, attributes, and processes in 
the HP EPS WAN Accelerator: 

♦ Optimization. The process of increasing data throughput and network 
performance over the WAN using the HP EPS WAN Accelerator. An 
optimized connection exhibits bandwidth reduction as it traverses the 
WAN due to the HP EPS WAN Accelerator. 

♦ Scalable Data Referencing. The proprietary algorithms that allow an 
arbitrarily large amount of data to be represented by a small number of 
references to the HP EPS WAN Accelerator data store. As data flows 
through the HP EPS WAN Accelerator, all Transmission Control Protocol 
(TCP) traffic is mapped onto references to data that is stored on either side 
of the link. This technology increases WAN network performance and 
decreases consumed bandwidth. 

♦ Auto-discovery. Auto-discovery is the process by which the HP EPS 
WAN Accelerator automatically intercepts and optimizes traffic on all 
Internet Protocol (IP) addresses and ports. By default, auto-discovery is 
applied to IP addresses and the ports which are not secure or interactive. 
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♦ Fixed Target. Fixed target rules directly specify out-of-path HP EFS WAN 
Accelerators near the target server. Determine which servers you would 
like a particular HP EFS WAN Accelerator to optimize (and, optionally, 
which ports), and add rules to specify the network of servers, ports, and 
out-of-path HP EFS WAN Accelerators to use. 

♦ Pass-Through. Pass-through describes WAN traffic that traverses the 
network unoptimized. You define pass-through rules to exclude subnets 
from optimization. Traffic is also passed through when the device is in 
bypass mode. Pass-through might be due to in-path rules or because the 
connection was established before the HP EFS WAN Accelerator was put 
in place or before the service was enabled. 

♦ Bypass. The HP EFS WAN Accelerator is equipped with a fail-through 
card to prevent a single point of failure. If there is a serious problem with 
the HP EFS WAN Accelerator, it goes into bypass mode and the traffic is 
passed-through unoptimized. For detailed information, see "Bypass 
Mode" on page 14. 

♦ Failover. You can deploy redundant HP EFS WAN Accelerators in your 
network to ensure optimization continues if there is a failure in one of the 
HP EFS WAN Accelerators. You can enable failover support in the 
Management Console or you can use the HP EFS WAN Accelerator 
command-line interface. 

Bypass Mode The HP EFS WAN Accelerator is equipped with the Adlink Gigabit Ethernet 

Card with fail-through interface. 

If there is a serious problem with the HP EFS WAN Accelerator, it goes into 
bypass mode to prevent a single point of failure. If the HP EFS WAN 
Accelerator is in bypass mode, you are notified in the following ways: 

♦ The Intercept /Bypass status light on the fail-through interface is off. 

♦ The Welcome page of the Management Console displays Critical in the 
Status box. 

♦ Simple Network Management Protocol (SNMP) traps are sent. 

♦ The event is logged to system logs (syslog). 

♦ Email notifications are sent (if yovi have set this option). 

When the HP EFS WAN Accelerator is in bypass mode the traffic passes 
through uninterrupted. Traffic that was optimized might be interrupted, 
depending on the behavior of the application-layer protocols. When 
connections are restored, they succeed, although without optimization. 

In a one appliance, out-of-path deployment, if the HP EFS WAN Accelerator 
fails, the first connection from the client fails. After detecting that the HP EFS 
WAN Accelerator is down, an HP EFS WAN Accelerator ping channel is setup 
from the client-side HP EFS WAN Accelerator to the server-side HP EFS WAN 
Accelerator. Subsequent connections are passed through unoptimized. When 
the HP EFS WAN Accelerator ping succeeds, processing is restored and 
subsequent connections are intercepted and optimized. 
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1 - Overview of the HP EFS WAN Accelerator 



When the fault is corrected, new connections that are made receive 
optimization, however connections made during the fault are not. To force all 
connections to be optimized, enable the fcicfcoj^f feature. Generally, connections 
are short lived and kickoff is not necessary. It is suitable for very challenging 
remote environments. For detailed information about enabling the kickoff 
feature, see the HP EPS WAN Accelerator Management Console User's Guide. 



IMPORTANT: HP EPS WAN Accelerator software Version 1.2 is compatible with 
Version 1.1.4 and newer versions.Version 1.1.4 and newer versions cannot 
communicate with Version 1.1.3 and older release installations due to a software 
protocol version change. If you are running Version 1.1.3, you must upgrade all the 
appliances in your network at the same time. If you are running Version 1.1.4 or later, 
you can mix and match versions of the HP EPS WAN Accelerator software (for 
example, 1.1.4 with 1.1.6). HP recommends you do not operate HP EPS WAN 
Accelerators in a mixed environment. 
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- Overview of the HP EFS WAN Accelerator 



Installing and Configuring the 
HP EPS WAN Accelerator 



In This Chapter This chapter describes how to install and configure the HP EPS WAN 

Accelerator. This chapter includes the following sections: 

♦ "Design and Deployment Overview," next 

♦ "Checking Your Inventory" on page 19 

♦ "Preparing Your Site for Installation" on page 19 

♦ "Required Tools and Equipment" on page 19 

♦ "Required Configuration Information" on page 20 

♦ "Mounting the HP EPS WAN Accelerator to a Rack" on page 21 

♦ "Powering On the HP EPS WAN Accelerator" on page 25 

♦ "Connecting to the HP EPS WAN Accelerator" on page 26 

♦ "Configuring In-Path HP EPS WAN Accelerators" on page 28 

♦ "Configuring Out-of-Path HP EPS WAN Accelerators" on page 35 

♦ "SMB Signing and Windows Performance" on page 40 



IMPORTANT: Please read and follow the safety guidelines described in "Safety 
Guidelines" on page 10. Failure to follow these safety guidelines can result in damage 
to the equipment. 



Design and Deployment Overview 

The following section summarizes the factors you need to consider before 
deploying the HP EPS WAN Accelerator in your network. 

When you deploy the HP EPS WAN Accelerator, you must consider the 
following elements for each side (that is, the client and server-side) of your 
network. 

1. Determine what kind of site you have: 
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♦ User Locations. An office that has users but no servers accessed by the 
other sites. 

♦ Server Locations (Data Centers). A central server location that remote 
offices access data from. 

♦ Users and Servers. A site that has users and servers that are accessed 
remotely. 

2. Determine what kind of Wide Area Network (WAN) routing 
infrastructure you have. For example, do you have one or two WAN 
routers? 

3. How much bandwidth do you use? If you use large amounts of 
bandwidth, you need to consider deploying multiple HP EFS WAN 
Accelerators using a Layer-4 switch or deploying the HP EFS WAN 
Accelerator in a static cluster. (If you do not want to deploy multiple HP 
EFS WAN Accelerators, you can also deploy the HP EFS WAN Accelerator 
using the Web Cache Communication Protocol (WCCP) in networks with 
large bandwidth requirements.) 

4. Choose a network template: 

♦ In-Path. The HP EFS WAN Accelerator is in the direct path between the 
client and the server. The client transparently communicates to the 
server; the server transparently communicates to the client, and there 
are HP EFS WAN Accelerators in between. In-path configurations are 
suitable for any location if the total bandwidth is within the limits of the 
installed HP EFS WAN Accelerator. For a detailed figure, see 
"Configuring In-Path HP EFS WAN Accelerators" on page 28. 

♦ Out-of-Path. The HP EFS WAN Accelerator is not in the direct path 
between the client and the server. An out-of-path configuration is 
suitable for data center locations where applications connect to the 
servers. For a detailed figure, see "Configuring Out-of-Path HP EFS 
WAN Accelerators" on page 35. 

5. Determine how many HP EFS WAN Accelerators you need for your site: 

♦ One HP EFS WAN Accelerator is typically deployed in network 
environments with small to moderate bandwidth requirements. 

♦ Two HP EFS WAN Accelerators are deployed for redundancy in 
network environments where network outages cannot be tolerated. 

♦ Two HP EFS WAN Accelerators are deployed in network 
environments with multiple WAN links. 

♦ Multiple HP EFS WAN Accelerators are deployed in large sites using 
WCCP, Layer-4 switches or in static cluster configurations. 

For detailed information about advanced network configurations such as 
redundant appliances, Layer-4 switch, Web Cache Communication Protocol 
(WCCP), and Policy Based Routing (PBR), see "Advanced Network 
Deployments" on page 45. 
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2 - INSTALUNG AND CONFIGURING THE HP EFS WAN ACCELERATOR 



Checking Your Inventory 



Your shipping carton contains the following items: 

♦ The HP EPS WAN Accelerator— the HP ProLiant DL320-510, DL320-1010, 
or DL320-2010, or the HP ProLiant DL380-3010 or DL380-5010 (depending 
on your order) 

♦ One CAT-5E straight-through cable 

♦ One CAT-5E crossover cable 

♦ One RS-232 serial null modem cable 

♦ One or two rack mount power cables (depending on your order). In 
addition, you may have one or two power cables specific to your region or 
country. 

♦ One rail kit 

♦ Documentation set CD-ROM specific to your order 

If any items are damaged or missing, notify HP technical support at 
http://www.hp.com for replacement or repair. 



Preparing Your Site for Installation 

The HP EES WAN Accelerator is completely assembled with all the equipment 
parts in place and securely fastened. 

Before you install the HP EES WAN Accelerator, make sure your site meets the 
following requirements: 

♦ A standard electronic environment where the ambient temperature is 
between ICC and 35° C (50° E and 95° E) and the relative humidity is 
between 10% and 90% (non-condensing). Eor detailed information, see 
Appendix A, "Technical Specifications and Regulatory Information." 

♦ Ethernet connections available within the standard Ethernet limit. 

♦ Space on a two or four post 19-inch rack. 

♦ A clean power source dedicated to computer devices and other electronic 
equipment. 



Required Tools and Equipment 

You need the following tools and equipment to mount the HP EES WAN 
Accelerator to a rack: 

♦ A standard 19 inch Telco-type mounting rack. The HP ProLiant DL380- 
3010 and DL380-5010 require 2 Units (U) of rack space. The HP ProLiant 
DL320-510, DL320-1010, and DL320-2010 require 1 U of rack space. 

HP StorageWorks Enterprise File Services WAN Accelerator Installation and Configuration Guide 19 



♦ Appropriate screwdriver for screws if mounting into a threaded-hole 
rack. Refer to the instructions that came with the rack mount kit. Also 
refer to the documentation that came with your system for important rack 
planning resource instructions. 



NOTE: If mounting to a two-post rack, go to http: / / www.racksolutions.com/hp . 



Required Configuration Information 

Before you begin the installation and configuration process gather the 
necessary configuration information: 

♦ Host name for the HP EPS WAN Accelerator 

♦ Internet Protocol (IP) address for the HP EPS WAN Accelerator 

♦ Netmask 

♦ Default gateway (the WAN gateway) 

♦ Domain Name Service (DNS) IP address 

♦ Domain name for the system 

♦ Por in-path configurations: in-path interface IP address, in-path netmask, 
and in-path default gateway. 

♦ Por in-path configurations, check the speed and duplex settings on the 
Local Area Network (LAN) switch and WAN router that the HP EPS 
WAN Accelerator will connect to. The settings for the HP EPS WAN 
Accelerator and the LAN and WAN devices must match. If these settings 
do not match, optimization is degraded. 



NOTE: The HP EFS WAN Accelerator automatically negotiates duplex settings. If one 
end of the link is set to auto-negotiate and the other end of the link is not set to auto- 
negotiate, the duplex settings default to half-duplex. This duplex mismatch passes 
traffic, but it causes late collisions and results in degraded optimization. To achieve 
maximum optimization set the devices to 100 or full. 



♦ Determine if there are any ports in your network that are restricted. The 
HP EPS WAN Accelerator automatically forwards traffic on interactive 
(for example. Telnet and shell) and secure ports (for example, ssh and 
smtps). Por a complete list of ports automatically forwarded, see 
Appendix B, "HP EPS WAN Accelerator Ports." 
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Mounting the HP EFS WAN Accelerator to a 
Rack 

Refer to the instructions that came with your rack kit. 



HP ProLiant DL320-510, DL320-1010, and 
DL320-2010 Hardware 

Figure 2-1. HP ProLiant DL320-510, DL320-1010, and DL320-2010 Hardware: Rear 
Panel 




00<D000000 



Table 0-1. HP ProLiant DL320-510, DL320-1010, DL320-2010 Hardware Explanation 



Item 


Description 


1 


Adlink Gigabit Ethernet Card with fail-through interface 


2 


PCI-X expansion slot 1, low-profile half-length 64 bit/ 100 MHz 3.3 V 


3 


Power supply 


4 


UlDbutton/LED 


5 


10/100/1000 NIC 1 


6 


10/100/1000 NIC 2 


7 


iLO management port 


8 Serial connector 


9 


Mouse connector 


10 


Keyboard connector 


11 


Video connector 


12 


USB connectors 
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Figure 2-2. HP ProLiant DL320-510, DL320-1010, and DL320-2010: 
and Buttons 



i: Front Panel LEDs 



000090 




/ / / 




Table 0-2. HP ProLiant DL320-510, DL320-1010, and DL320-2010: Front Panel LEDs 
and Buttons Explanation 



Item Description 



Status 



UIDbutton/LED 



Internal health LED 



Blue = Identification is activated. 

Flashing blue = System is being remotely 
managed. 

Off = Identification is 

Green = System health is normal. 

Amber = System is degraded. To identify 
the component in a degraded state, refer to 
system board LEDs (on page 14). 

Red = System critical. To identify the 
component in a critical state, refer to system 
board LEDs (on page 14). 

Off = System health is normal (when in 
standby mode). 



NIC 1 link /activity LED Green = Network link exists. 



Flashing green = Network link and activity 
exist. 

Off = No link to network exists. 



NIC 2 link/activity LED Green = Network link exists. 



Flashing green = Network link and activity 
exist. 

Off = No link to network exists. 



Drive activity LED 



Green = Drive activity is normal. 
Amber = Drive failure occurred. 
Off = No drive activity. 
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Item Description 



Status 



Power On/Standby Green = System is on. 

button and system power . , n ■ i ^ j it 

Amber = System is shut down, but power is 

still applied. 

Off = Power cord is not attached, power 
supply failure has occurred, no power 
supplies are installed, facility power is not 
available, or the DC-to-DC converter is not 
installed. 



HP ProLiant DL380-3010 and DL380-5010 
Hardware 

Figure 2-3. HP ProLiant DL380-3010 and DL380-5010 iHardware 




Table 0-3. iHP ProLiant DL380-3010 and DL380-5010 Hardware Explanation 



Item 


Description 


1 


• PCI-X expansion slot 3, 64-bit/ 100 MHz, Bus B 




• Hot-pluggable PCl-X expansion slot 3, 64-bit/ 100 MHz, Bus B 




• PCI Express x4 slot 2, Bus B* 


2 


• PCI-X expansion slot 2, 64-bit/ 100 MHz, Bus B 




• Hot-pluggable PCl-X expansion slot 2, 64-bit/ 100 MHz, Bus B 




• PCI Express x4 slot 1, Bus A* 


3 


Adlink Gigabit Ethernet Card with fail-through interface 


4 


Serial connector 


5 


iLO management port 


6 


Mouse connector 


7 


Power cord connector 


8 Keyboard connector 


9 


NIC 1 connector 


10 


NIC 2 connector 
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Item 


Description 


11 


USB connectors 


12 


Video connector 


13 


VHDCI SCSI connector (port 1) 



* x8 PCI Express cards are supported and will run at x4 speeds. 



Figure 2-4. HP ProLiant DL380-3010 and DL380-5010 Front Panel LEDs and Buttons 




Table 0-4. HP ProLiant DL380-3010 and DL380-5010: Front Panel LEDs and Buttons 
Explanation 



Item Description Status 

1 Internal health LED Green = Normal 

Amber = System degraded. Refer to system 
board LEDs to identify component in 
degraded state. 

Red = System criticaL Refer to system board 
LEDs to identify component in critical 

Green = Normal 

Amber = Power redxmdancy failure 
Red = Critical power supply failure 3 

3 NIC 1 link/activity LED Green = Network link 

Flashing = Network link and activity 

Off = No link to network. If power is off, 
view the rear panel RJ-45 LEDs for status 

4 NIC 2 link/ activity LED Green = Network link 

Flashing = Network link and activity 

Off = No link to network. If power is off, 
view the rear panel RJ-45 LEDs for status. 



2 External health LED 

(power 
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Item 


Description 


Status 


5 


UID LED button 


Blue = Activated 






Flashing = System being remotely managed 






Off = Deactivated 


6 


Power On /Standby 
button/ system power 
LED 


Green = System on 

Amber = System shut down, but power still 
applied 



Off - Power cord not attached or power 
supply failure 



NIC Port LabelingTerminology Note 

Labeling for the NIC ports varies on the Riverbed Technology, Inc. Steelhead 
appliance and the HP ProLiant DL320 and DL380 servers. To avoid confusion, 
the table below outlines the different labels for the NIC ports. 



Product 


Label 1 


Label 2 


Riverbed Technology, Inc. Steelhead appliance 


Primary 


AUX 


HP ProLiant DL320-510, DL320-1010, and DL320-2010 


NICl 


N1C2 


HP ProLiant DL380-3010 and DL380-5010 


1 


2 



Powering On the HP EFS WAN Accelerator 

The following section describes how to connect the Alternating Current (AC) 
power and how to power on the HP EFS WAN Accelerator. 

To power on the HP 1. Plug the AC power cord into the HP EFS WAN Accelerator (Figure 2-1 on 

ProLiant DL320-510, page 21, item 3). 
DL320-1010, and 

DL320-2010 2. Plug the AC power cord into an uninterrupted AC power source . 

3. Press the Power On/Standby button on the front of the HP EFS WAN 
Accelerator (Figure 2-2 on page 22, item 6). 

4. Check the status lights on the front and rear of the HP EFS WAN 
Accelerator. 
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1. Plug the AC power cords into the HP EPS WAN Accelerator (Pigure 2-3 on 
page 23, item 7). 

2. Plug the AC power cords into an uninterrupted AC power source. 

3. Press the Power On/Standby button on the front of the HP EPS WAN 
Accelerator (Figure 2-4 on page 24, item 6). 

4. Check the status lights on the front and rear of the HP EPS WAN 
Accelerator. 



NOTE: The disk drives take about 2-5 minutes to boot. 



HP System Management Homepage v2.0 

The HP System Management Homepage v2.0 is a web-based interface that 
consolidates and simplifies the management of HP ProLiant servers. It 
provides a secure and intuitive interface to review in-depth hardware 
configuration and status data, performance metrics, system thresholds and 
software version control information. Go to the HP System Management 
Homepage v2.0 for more information. 



Integrated Lights-Out 

The Integrated Lights-Out (iLO) feature allows remote server management. 
Refer to the Integrated Lights-Out User Guide that came with the 
documentation set CD-ROM for your product. 



Connecting to the HP EFS WAN Accelerator 

To access the configuration wizard and the HP EFS WAN Accelerator 
command-line interface (CLI), you establish a serial connection using a 
terminal emulator program. 

1. Plug the serial cable into the Console port on the HP EFS WAN 
Accelerator. 

♦ For the HP ProLiant DL320-510, DL320-1010, and DL320-2010, refer to 
refer to Figure 2-1 on page 21, item 8. 



To power on the HP 
ProLiant DL380-3010 
and DL380-5010 



To connect to the HP 
StorageWorks 
Enterprise File 
Services WAN 
Accelerator 



26 



2 - INSTALUNG AND CONFIGURING THE HP EFS WAN ACCELERATOR 



♦ For the HP ProLiant DL380-3010 and DL380-5010, refer to Figure 2-3 on 
page 23, item 4. 



TIP: You can also connect to the HP EFS WAN Accelerator using a crossover cable. 
Plug a crossover cable into the NICl (Primary) port of the HP EFS WAN Accelerator 
and your laptop computer. If you use this method, you will b e disconnected after 
changing the primary default IP address (169.254.169.254) in the configuration wizard. 
You must reconnect using the new IP address that you entered and restart the 
configuration wizard using the configuration jump-start command in the CLI. 



2. Start your terminal emulation program. The terminal device must have the 
following settings: 

♦ Baud rate: 9600 bps 

♦ Data bits: 8 

♦ Parity: none 

♦ Stop bits: 1 

♦ No flow control 



NOTE: If you are using the HP EFS WAN Accelerator with a terminal server, the 
terminal server must use hardware flow control for the port connected to the HP EFS 
WAN Accelerator. 



3. Log in as administrator user (admin) and enter the default password 
(password). For example: 

login as: admin 

Sent username "admin" 

password: password 

4. Check the system and disk drive status lights. 

♦ For the HP ProLiant, refer to DL320-510, DL320-1010, and DL320-2010, 
refer to Figure 2-2 on page 22. 

♦ For the HP ProLiant DL380-3010 and DL380-5010, refer to Figure 2-4 on 
page 24. 

The HP EFS WAN Accelerator is equipped with the following fail-through 
cards: 

Figure 2-5. Adiink Gigabit-Ethernet (Gig-E) Fail-Througli Card 
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The following table describes the Adlink Gig-E Status Lights 



Status Lights 


Signal 


Description 


Intercept/ 


SOLID 


Normal State 


Bypass 


OFF 


Bypass or Power Off 




ON 


Watchdog Time Out 


Heartbeat 


FLASHING 


Watchdog Running 




OFF 


Watchdog Disabled 



The following table describes the Adlink Gig-E card Light-Emitting Diode 
(LED) lights. 



Status 




Left LED (Yellow) 


Right LED (Green) 


Network Link Not 
Established 


OFF 


OFF 


10 Mbps 


Link 


OFF 


SOLID (GREEN) 


(10 Base T) 


Active 


OFF 


FLASHING (GREEN) 


100 Mbps 


Link 


SOLID (YELLOW) 


OFF 


(100 Base T) 


Active 


FLASHING (YELLOW) 


OFF 


1000 Mbps 


Link 


SOLID (YELLOW) 


SOLID (GREEN) 


(1000 Base T) 


Active 


FLASHING (YELLOW) 


FLASHING (GREEN) 



After you have established connection, you configure the HP EES WAN 
Accelerator using the configuration wizard: 

♦ For in-path configurations, see "Configuring In-Path HP EES WAN 
Accelerators," next 

♦ Eor out-of-path configurations, see "Configuring Out-of-Path HP EES 
WAN Accelerators" on page 35. 



Configuring In-Path HP EFS WAN 
Accelerators 

In an in-path configuration the HP EES WAN Accelerator is in the direct path 
between the client and the server. Perform the following procedures on the 
client-side and server-side HP EES WAN Accelerators. 
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Configuring 
Your Speed and 
Dupiex Settings 



Before you begin the configuration process, check the settings on router and 
switch that your HP EPS WAN Accelerator will be connected to. Make sure the 
settings on the device and the appliance match (preferably, 100 Mbps or f ul 1 
for proper operation). If the settings do not match, optimization might be 
degraded. 



Figure 2-6. In-Rath Configuration 



Server 




To configure the HP 1. To start the configviration wizard, enter yes at the system prompt. Por 
StorageWorks example: 
Enterprise File ^. , 

— . ...... Configuration wizard. 

vi««^£> ivnii j~io you want to use the wizard for initial configuration? yes 

Accelerator 



TIP: Press ENTER to enter the default value. Press '?' for help. Press CTRL B to go back 
to the previous step. If you mistakenly answer no, you can restart the configuration 
wizard by entering configuration jump-start at the system prompt. 



2. To configure the host name for the HP EPS WAN Accelerator, enter the 
host name at the system prompt. Por example: 

step 1: Hostname? minna 

3. You are given the option to enable the Dynamic Host Configuration 
Protocol (DHCP) to automatically assign an IP address to the primary 
interface (that is, the HP EPS WAN Accelerator). HP recommends you do 
not set DHCP. The default value is no. Por example: 

step 2 : Use DHCP? no 

4. To configure the primary interface for the HP EPS WAN Accelerator, enter 
the IP address you want to assign to the appliance at the system prompt. 
Por example: 

step 3: Primary IP address? 10.0.0.74 

5. To configvire the netmask, enter the netmask address at the system prompt. 
Por example: 

step 4: Netmask? 255.255.0.0 

6. To configure the default gateway for the HP EPS WAN Accelerator, enter 
the IP address at the system prompt. Por example: 
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step 5: Default gateway? 10.0.0.1 

This value sets the default gateway to your network for optimization, 
logging. Simple Network Management Protocol (SNMP) traps, and 
Management Console access. 

7. To configure the primary Domain Name Service (DNS), enter the IP 
address of the DNS server at the system prompt. For example: 

step 6: Primary DNS server? 10.0.0.2 

8. To configure the domain name for the system, enter the domain name at 
the system prompt. For example: 

step 7: Domain name? mydomain.com 

If you configure a domain name, you can enter host names in the system 
without the domain name. 

9. To assign a new password to the administrator user (admin), type a 
password at the system prompt. For example: 

step 8: Admin password? xxxyyy 

HP strongly recommends that you change the default password at this 
time. The password must be minimum of 6 characters. The default 
administrator password is password. 

10. If you have already configured another HP EFS WAN Accelerator, you are 
given the option to copy your configuration settings to this appliance. To 
copy configuration settings, type yes at the system prompt. If you do not 
need to copy a configuration, type no at the system prompt. For example: 

step 9: Copy config from another site? no 

11. To set the speed on the primary interface (that is, the HP EFS WAN 
Accelerator), type a vakie at the system prompt. Make sure the value 
matches the settings on your router or switch. The default value is auto. 
For example: 

step 10: Set the primary interface speed? [auto] 100 

12. To set the duplex mode on the primary interface, type a value at the system 
prompt. Make sure the value matches the settings on your router or switch. 
The default value is auto. For example: 

step 11: Set the primary interface duplex? [auto] full 

13. To configure in-path support, enter yes at the system prompt. An rn-path 
configuration is a configuration in which the HP EFS WAN Accelerator is 
in the direct path of the client and server. For example: 

step 12: Would you lil^e to activate the in path configuration? yes 

For detailed information about rn-path configurations and why you 
would use them, see 'Tn-Path Deployments" on page 46. 

14. Enter the rn-path IP address for the HP EFS WAN Accelerator at the system 
prompt. For example: 
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step 13: In Path IP address? 10.0.0.100 

15. Enter the in-path netmask address at the system prompt. For example: 

step 14: In Path Netmask? 255.255.255.0 

16. Enter the in-path default gateway (the WAN gateway) at the system 
prompt. For example: 

step 15: In-Path Default Gateway? 10.0.0.4 

17. To set the in-path, local area network (LAN) interface speed, type a value 
at the system prompt. Make sure the value matches the settings on your 
router or switch. The default value is auto. For example: 

step 16: Set the in-path:LAN interface speed? [auto] 100 

18. To set the in-path, LAN duplex speed, t3^e a value at the system prompt. 
Make sure the value matches the settings on your router or switch. The 
default value is auto. For example: 

step 17: Set the in-path:LAN interface duplex? [auto] full 

19. To set the in-path, WAN interface speed, type a value at the system 
prompt. Make sure the value matches the settings on your router or switch. 
The default value is auto. For example: 

step 18: Set the in-path:WAN interface speed? [auto] 100 

20. To set the in-path, WAN duplex speed, type a value at the system prompt. 
Make sure your setting matches the setting on your router or switch. The 
default value is auto. For example: 

step 19: Set the in-path:WAN interface duplex? [auto] full 

21. The system confirms your settings. 

You have entered the following information: 

1. Hostname: minna 

2. Use DHCP: no 

3. Primary IP address: 10.0.0.74 

4. Netmas]^: 255.255.0.0 

5. Default gateway: 10.0.0.1 

6. Primary DNS server: 10.0.0.2 

7 . Domain name : mydomain . com 

8. Admin password: (unchanged) 

9. Copy config from another site: no 

10. Set the primary interface speed: 100 

11. Set the primary interface duplex: full 

12. Would you lilce to activate the in-path configuration: no 

13. In-Path IP address: 10.0.0.100 

14. In-Path Netmaslt: 255.255.0.0 

15. In-Path Default gateway: 10.0.0.4 

16. Set the in-path:LAN interface speed: 100 

17. Set the in-path: LAN interface duplex: full 

18. Set the in-path:WAN interface speed: 100 

19. Set the in-path:WAN interface duplex: full 

To change an answer, enter the step number to return to. 
Otherwise hit <enter> to save changes and exit. 
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choice : 

The HP EPS WAN Accelerator configuration wizard automatically saves 
your configuration settings. 

22. To log out of the system, enter the following command at the system 
prompt: 

# exit 



Connecting the 
HP EFS WAN 
Accelerator to 
Your Network 



You use CAT-5E straight-through and crossover cables to connect to your 
network in an in-path configuration. Make sure you use the correct cables to 
establish your network connections: 

♦ Straight-through cables. Use straight-through cables to connect the NICl 
(Primary) and LAN ports on the HP EFS WAN Accelerator to the LAN 
switch 

♦ Crossover cable. Use the crossover cable to connect the WAN port on the 
HP EFS WAN Accelerator to the WAN router 



To CO n nect t he H P E FS 
WAN Accelerator to 
your network 



1. Plug the straight-through cable into the NICl (Primary) port of the HP EFS 
WAN Accelerator and the LAN switch. (This can be any port on your LAN 
switch that acts as a host.) 

♦ For the HP ProLiant DL320-510, DL320-1010, and DL320-2010, refer to 
Figure 2-1 on page 21, item 5. 

♦ For the HP ProLiant DL380-3010 and DL380-5010, refer to Figure 2-3 on 
page 23, item 9. 

2. Unplug the WAN router cable that connects to your LAN switch. 
Figure 2-7. Disconnecting the WAN Router 




3. Plug the cable you unplugged into the WAN port of the HP StorageWorks 
Enterprise File Services WAN Accelerator and the WAN router. (This must 
be a crossover cable.) 

♦ For the HP ProLiant DL320-510, DL320-1010, and DL320-2010, refer to 
Figure 2-1 on page 21, item 1. For a detailed view, refer to Figure 2-5 on 
page 27. 

♦ For the HP ProLiant DL380-3010 and DL380-5010, refer to Figure 2-3 on 
page 23, item 3. For a detailed view, refer to Figure 2-5 on page 27. 

4. Plug the straight-through cable into the LAN port of the HP EFS WAN 
Accelerator and the LAN switch. 

♦ For the HP ProLiant DL320-510, DL320-1010, and DL320-2010, refer to 
Figure 2-1 on page 21, item 1. For a detailed view, refer to Figure 2-5 on 
page 27. 

♦ For the HP ProLiant DL380-3010 and DL380-5010, refer to Figure 2-3 on 
page 23, item 3. For a detailed view, refer to Figure 2-5 on page 27. 
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You can now optimize WAN traffic using the HP EPS WAN Accelerator. 



Verifying Your 
Connections 



Perform the following tasks to verify that you have properly connected the HP 
EPS WAN Accelerator. 



To verify your 
connections 



1. Verify that you can connect to the HP EPS WAN Accelerator CLI using one 
of the following devices: 

♦ An ASCII terminal or emulator that can connect to the serial console. It 
must have the following settings: 9600 baud, 8 bits, no parity, 1 stop bit, 
and no flow control. 

♦ A computer with a Secure Shell (ssh) client that is connected to the HP 
EPS WAN Accelerator NICl (Primary) port. 

2. At the system prompt, enter the following command: 

ssh admin&host. domain 

or 

ssh admin&ipaddress 

3. You are prompted for the administrator password. This is the password 
you set in the configuration wizard. 

4. At the system prompt, ping from the management interface. 

ping -I <primary-IP-address> <primary-def ault-gateway> 

5. At the system prompt, ping from the in-path default gateway, 
ping -I <in-path-IP-address> <in-path-def ault-gateway> 



Connecting to 
the 

l\/lanagement 
Console 



After you configure the HP EPS WAN Accelerator, you can check and modify 
your configuration settings, and view performance reports and system logs in 
the Management Console. You can connect to the Management Console 
through any supported Web browser. 

To connect to the Management Console you must know the host, domain, and 
administrator password that you assigned during the initial setup of the HP 
EPS WAN Accelerator. 



NOTE: Cookies and Javascript must be enabled in your Web browser. 



To connect to the 
lUlanagement Console 



1. Enter the URL for the Management Console in the location box of your 
Web browser: 
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protocol : / /host . domain 



protocol is http or https. Hyper Text Transport Protocol Secure (HTTPS) 
uses the Secure Sockets Layer (SSL) protocol to ensure a secure 
environment. If you use HTTPS to connect you are prompted to inspect 
and verify the SSL key. 

host is the host name you assigned to the HP EPS WAN Accelerator 
during initial configuration. If your DNS server maps that IP address to a 
name, you can specify the DNS name. 

domain is the full domain name for the HP EPS WAN Accelerator. 



NOTE: Alternatively, you can specify the IP address instead of the host and domain. 
For example: http://169.254.169.254/. 



The Management Console appears, displaying the Welcome page. 
Figure 2-8. Welcome Page 



C Welcome... 

Q Please enter your account name and password and then click 'Login'. ^ 

Account; [admin | 
Password; 



2. In the Account text box, type the user login: admin, monitor, a login from 
a Remote Authentication Dial-In User Service (RADIUS), or a Terminal 
Access Controller Access Control System (TACACS+) database. The 
default login is admin. 

Users with administrator (admin) privileges can configure and 
administer the HP EPS WAN Accelerator. Users with monitor (monitor) 
privileges can view connected HP EPS WAN Accelerators and reports. 

3. In the Password text box, type the password you assigned in the 
configuration wizard. 

4. Click Login to display the Home: Welcome page. The Home: Welcome 
page summarizes the current performance of your system and provides 
links to system logs and HP technical support. 



VsrifyillQ Your Perform the following tasks to verify that you have properly configured the 

Configuration Accelerator. 
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To verify your speed 
and duplex settings 



To verify optimization 
in an in-path 
configuration 



If you selected auto-negotiation (auto) for your in-path and primary 
interfaces, you must make sure that the HP EPS WAN Accelerator negotiated 
the speed and duplex at the rate that your devices expect (for example, 100 
and full for proper operation to occur). You can verify your speed and 
duplex settings in the Management Console Reports. 

1. In the Management Console, click Logging to display the Logging: View 
System Logs page. 

2. Check for duplex and speed errors in the system logs (for example, crc 
and frame errors). 

3. Click Reports to display the Reports: Bandwidth Optimization page. 

4. In the left menu, click Network Interfaces to display the Reports: Network 
Interfaces Statistics page. 

5. Check the speed and duplex settings on your LAN and WAN interface. To 
modify your settings, go to the Setup: Networking, Names & Interfaces 
page. 

1. Mount a drive on the client machine. 

2. Drag and drop a 1 MB file. 

3. Drag and drop the 1 MB file again. Performance improves significantly. 



Configuring Out-of-Path HP EFS WAN 
Accelerators 

In an out-of-path configuration, the client-side HP EFS WAN Accelerator is 
configured as an in-path interface and the server-side, HP EFS WAN 
Accelerator is configured as an out-of-path interface. 



Configuring 
Your Speed and 
Duplex Settings 



Before you begin the configuration process, check the settings on router and 
switch that your HP EFS WAN Accelerator will be connected to. Make sure the 
settings on the device and the HP EFS WAN Accelerator match (preferably, 
100 Mbps or full for proper operation). If the settings do not match, 
optimization might be degraded. 

Figure 2-9. Out-of-Path Configuration 

LAN 

Ml. _ . . HP EFS WAN 



Servers 



Router Switch 




HP EFS^AN 
Accelerator 
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Configuring the 

Server-Side 

Appliance 

To configure the 
server-side HP EFS 
WAN Accelerator 



You use the configuration wizard to configure an out-of-path HP EFS WAN 
Accelerator. 



1. To start the configuration wizard, enter yes at the system prompt. For 
example: 

Configuration wizard. 

Do you want to use the wizard for initial configuration? yes 



TIP: Press ENTER to enter the default value. Press '?' for help. Press CTRL B to go back 
to the previous step. If you mistakenly answer no, you can start the configuration 
wizard by entering configuration jump-start at the system prompt. 



2. To configure the host name for the HP EFS WAN Accelerator, enter the 
host name at the system prompt. For example: 

step 1: Hostname? minna 

3. You are given the option to enable the Dynamic Host Configuration 
Protocol (DHCP) to automatically assign an IP address to the primary 
interface (that is, the HP EFS WAN Accelerator). HP recommends you do 
not set DHCP. The default value is no. For example: 

step 2 : Use DHCP? no 

4. To configure the primary interface for the HP EFS WAN Accelerator, enter 
the IP address you want to assign to the appliance at the system prompt. 
For example: 

step 3: Primary IP address? 10.0.0.74 

5. To configure the netmask, enter the netmask address at the system prompt. 
For example: 

step 4: Netmask? 255.255.0.0 

6. To configure the default gateway for the HP EFS WAN Accelerator, enter 
the IP address at the system prompt. For example: 

step 5: Default gateway? 10.0.0.1 

This value sets the default gateway to your network for optimization, 
logging. Simple Network Management Protocol (SNMP) traps, and 
Management Console access. 

7. To configure the primary Domain Name Service (DNS), enter the IP 
address of the DNS server at the system prompt. For example: 

step 6: Primary DNS server? 10.0.0.2 

8. To configure the domain name for the system, enter the domain name at 
the system prompt. For example: 
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step 7: Domain name? mydomain.com 

If you configure a domain name, you can enter host names in the system 
without the domain name. 

9. To assign a new password to the administrator user (admin), type a 
password at the system prompt. For example: 

step 8 : Admin password? xxxyyy 

HP strongly recommends that you change the default password at this 
time. The password must be minimum of 6 characters. The default 
administrator password is password. 

10. If you have already configured another HP EPS WAN Accelerator, you are 
given the option to copy your configuration settings to this appliance. To 
copy configuration settings, type yes at the system prompt. If you do not 
need to copy a configuration, type no at the system prompt. For example: 

step 9: Copy config from another site? no 

11. To set the speed on the primary interface (that is, the HP EFS WAN 

Accelerator), type a value at the system prompt. Make sure the value 
matches the settings on your router or switch. The default value is auto. 
For example: 

step 10: Set the primary interface speed? 100 

12. To set the duplex mode on the primary interface, type a value at the system 
prompt. Make sure the value matches the settings on your router or switch. 
The default value is auto. For example: 

step 11: Set the primary interface duplex? [auto] full 

13. You are given the option to activate in-path support. Type no at the system 
prompt. For example: 

step 12: Would you like to activate the in path configuration? no 

14. To activate an out-of-path configuration, type yes at the system prompt. 
For example: 

step 13: Would you like to activate the out-of-path configuration? [no] 
yes 

The system confirms your settings. 

You have entered the following information: 

1. Hostname: minna 

2. Use DHCP: no 

3. Primary IP address: 10.0.0.74 

4. Netmask: 255.255.0.0 

5. Default gateway: 10.0.0.1 

6. Primary DNS server: 10.0.0.2 

7 . Domain name : mydomain . com 

8. Admin password: (unchanged) 

9. Copy config from another site: no 

10. Set the primary interface speed: 100 

11. Set the primary interface duplex: full 

12. Would you like to activate the in-path configuration: no 

13: Would you like to activate the out-of-path configuration? yes 
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To change an answer, enter the step number to return to. 
Otherwise hit <enter> to save changes and exit. 

Choice : 

The HP EPS WAN Accelerator configuration wizard automatically saves 
your configuration settings. 

15. To log ovit of the system, enter the following command at the system 
prompt: 

# exit 



Connecting the 
HP EFS WAN 
Accelerator to 
Your Network 



You use a CAT-5E straight-through cable to connect the NICl (Primary) port 
of the HP EFS WAN Accelerator to the LAN switch in an out-of-path 
configuration. 



To connect the HP EFS 
WAN Accelerator to 
your network 



Plug the straight- through cable into the NICl (Primary) port of the HP EFS 
WAN Accelerator and the LAN switch. (This can be any port on your LAN 
switch that acts as a host.) 

♦ For the HP ProLiant DL320-510, DL320-1010, and DL320-2010, refer to 
Figure 2-1 on page 21, item 5. 

♦ For the HP ProLiant DL380-3010 and DL380-5010, refer to Figure 2-3 on 
page 23, item 9. 
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Configuring the 
Client-Side HP 
EFS WAN 
Accelerator 



In an out-of-path configuration, you configure the client-side, HP EFS WAN 
Accelerator in the same way as an in-path configuration. For optimization to 
occur, you must define a fixed-target rule on the client-side HP EFS WAN 
Accelerator that points to the out-of-path, server-side HP EFS WAN 
Accelerator. You can define fixed-target rules using the Management Console 
or the HP EFS WAN Accelerator command-line interface. 



To configure the 
client-side HP 
StorageWorl<s 
Enterprise File 
Services WAN 
Accelerator 



Home : Setup : Reports : Logging : Help 



Service 



For detailed information about the Management Console, see the HP EFS 

WAN Accelerator Management Console User's Guide. 

1. Follow the procedures for an in-path configuration. For details, see 
"Configuring In-Path HP EFS WAN Accelerators" on page 28. 

2. Connect to the Management Console. For details, see "Connecting to the 
Management Console" on page 33. 

3. Navigate to the Setup: Service, In Path Rules, Fixed Target page. 
Figure 2-10. Setup: Service, In Path Rules, Fixed Target Page 

Q O Logged in as; admin (logout) 



Configuration 



WCCP Service Groups Asymmetric Routing 



In-Path Rules IE? 

^ Check and modify your in-path rules. By defaultj all traffic going through this appliance is optimized. 



1 # Action Source 


Destination 


Port 


VLAN ID 


Target 


Port 1 


def Auto Discover all 


all 


all 


all 







Remove Selected Rules 



Add New Rule: 



^ Fixed target rules directly specify out-of-path appliances near the target server. 



Insert Rule Before; 
Source Subnet; 
Destination Subnet; 
Target IP Address; 
Backup Target IP Address; 
VLAN Tag ID; 



Netmask; 0.0.0.0 



10.0.0.731 



I Netmask; |0. 0.0.0 
I Port; ' 
I Port; 



|7S10 
17810 



Add Rule 



Additional Options: 

0 Automatically Pass Through Traffic for Known Secure Ports 
0 Automatically Pass Through Traffic for Known Interactive Ports 



[Apply I 



Save Reset 



4. Type the out-of-path, server-side, HP EFS WAN Accelerator IP address 
and port in the Target IP Address and Port text boxes. 

5. Click Save to write your settings to memory or click Reset to return the 
settings to their previous values. 



■ NetworkJng 

■ Service « 

■ Protocols 

■ Alarms 

■ Logging 

■ Reports 

■ Date & Time 

■ Accounts 

■ Configuration Manager 

■ Upgrade Software 

■ Update License 

■ Start/Stop Service 

■ Reboot Appliance 

■ Shutdown Appliance 
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You can check and modify your configuration settings in the Management 
Console. For detailed information, see the HP EPS WAN Accelerator 
Management Console User's Guide. 

For detailed information about verifying your connections and configuration 
settings, see "Verifying Your Connections" on page 33 and "Verifying Your 
Configuration" on page 34. 

You can now optimize WAN traffic using the HP EFS WAN Accelerator. 



SMB Signing and Windows Performance 

The Common Internet File System (CIFS) protocol, used by Windows 
operating systems for file and print sharing, is based on the Server Message 
Block (SMB) protocol. To prevent security assaults that might modify 
transmissions, the SMB protocol supports signing all transmitted SMB 
packets. By default. Domain Controllers that also act as file servers have 
signing enabled. 

SMB signing prevents the HP EFS WAN Accelerator from applying full 
optimization on CIFS connections and significantly reduces the performance 
gain of an HP EFS WAN Accelerator deployment. As many customers take 
additional security precautions (such as firewalls, internal-only reachable 
servers, and so forth), the SMB signing adds little additional security, at a 
significant performance cost (even without HP EFS WAN Accelerators). 

SMB signing is a performance intensive operation for clients and servers. 
Hence this feature is not turned on all the time. This feature is negotiated 
between the client and the server. 



NOTE: For detailed information about the performance impact of SMB signing, see the 
Microsoft support site at: http://www.microsoft.com/technet/treeview/ 
default.asp?url=/technet/prodtechnol/windowsserver2003/proddocs/datacenter/ 
570.asp. SMB signing was enabled on Windows 2000, Service Pack 3, Critical fix 
Q329170. 



You can disable SMB signing using one of the following approaches: 

♦ "Disabling SMB Signing Using Active Directory," next 

♦ "Enabling the Secure-CIFS Feature" on page 43 



Disabling SIVIB 
Signing Using 
Active Directory 



To disable SMB signing you must revise the defavilt SMB registry parameters. 
SMB signing is controlled by the following registry parameters: 

enablesecuritysignature (SSEn) 
requiresecuritysignature (SSReq) 



The registry settings are located in: 
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HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\l 
anmanserverXparameters 

The following table summarizes the default the SMB signing registry 
parameters. 



Machine Role 


SSEn 


SSReq 


Client/Workstation 


ON 


OFF 


Member Server 


OFF 


OFF 


Domain Controller 


ON 


ON 



With these default registry parameters, SMB signing is negotiated in the 
following manner: 

♦ SMB / CIFS exchanges between the Client/ Workstation and the Member 
Server are not signed. 

♦ SMB/CIFS exchanges between the Client/Workstation and the Domain 
Controller are always signed. 

The following table lists the revised SMB registry parameters that ensure full 
optimization (that is, bandwidth and latency optimization) with the HP EFS 
WAN Accelerator. 



Number 


ClientAV orkstation 


Member Server 


Results 




SSEn SSReq 


SSEn 


SSReq 




1 


OFF OFF 


OFF 


OFF 


Signature Disabled: Full Optimization 


2 


OFF OFF 


ON 


OFF 


Signature Disabled: Full Optimization 


3 


ON OFF 


OFF 


OFF 


Signature Disabled: Full Optimization 




There are two sets of these parameters on each computer: one set for the 
computer as a server and the other set for the computer as a client. 




NOTE: On the client, if SMB signing is set to required, do not disable it on the server. 
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To disable SMB 
signing on Windows 
2000 domain 
controllers, member 
servers, and clients 



To disable SMB 
signing on Windows 
2003 domain 
controllers, member 
servers, and clients 



1. Open Active Directory Users and Computers on the domain controller. 

2. Right click Domain Controllers and select Properties. 

3. Click the Group Policy tab. 

4. Click Default Domain Controllers Policy and select Edit. 

5. Click Default Domain Controllers Policy/Computer Configuration/ 
Windows Settings/Security Settings/Local Policies/Security Options. 

6. Disable Digitally sign client communication (always) and Digitally sign 
server communication (always). 

7. Disable Digitally sign client communication (when possible) and 
Digitally sign server communication (when possible). 

8. Reboot all the domain controllers and member servers that you want to 
optimize. 

1. Open Active Directory Users and Computers on the domain controller. 

2. Right click Domain Controllers and select Properties. 

3. Click the Group Policy tab. 

4. Click Default Domain Controllers Policy and select Edit. 

5. Click Default Domain Controllers Policy/Computer Configuration/ 
Windows Settings/Security Settings/Local Policies/Security Options. 

6. Disable Microsoft Network Server: digitally sign communications 
(always) and Microsoft Network Server: digitally sign communications 
(if client agrees). 

7. Disable Microsoft Network Client: digitally sign client communication 
(always) and Microsoft Network client: digitally sign server 
communications (if server agrees). 

8. Reboot all the domain controllers and member servers that you want to 
optimize. 

You can verify that SMB signing has been disabled on your domain 
controllers, member servers, and clients. The following procedures assume 
that you have installed and configured the HP EPS WAN Accelerators in your 
network. 



To verify that SMB 1. Copy a couple of files from the server to the client through the HP EPS 

signing has been WAN Accelerators. 

disabled 

2. View the server-side HP EPS WAN Accelerator logs in the Logging: View 
System Logs page of the Management Console. The following warning 
messages indicate that the SMB security signatures are still enabled: 



42 



2 - INSTALUNG AND CONFIGURING THE HP EFS WAN ACCELERATOR 



SMB_SHUTDOWN_ERR_SEC_SIG_ENABLED 
SMB_SHUTDOWN_ERR_SEC_SIG_REQUIRED 

3. Repeat Step 6 and Step 7 in "To disable SMB signing on Windows 2000 
domain controllers, member servers, and clients" on page 42. 



Enabling the 
Secure-CIFS 
Feature 



Secure-CIFs enables you to automatically disable SMB signing using an HP 
EPS WAN Accelerator CLI command. 

By default the Secure-CIPS feature is disabled. When a Windows server is set 
to SecuritySignatureEnable, the HP EPS WAN Accelerator stops CIPS 
optimization but continues performing HP EPS WAN Accelerator 
optimization. 

If you enable Secure-CIPS using the HP EPS WAN Accelerator CLI command 
secure-sig-opt, the HP EPS WAN Accelerator performs CIPS optimization for 
connections even when the SecuritySignatureEnable setting is specified. 



IMPORTANT: The HP EFS WAN Accelerator does not optimize traffic if the 
SecuritySignatureRequired setting is specified on the server. 



Before you enable Secure-CIPS, you mvist consider the following factors: 

♦ If the client-side machine has Required signing, enabling secure-CIPS 
prevents the client from connecting to the server. 

♦ If the server-side machine has Required signing, they connect but you 
cannot perform full latency optimization with the HP EPS WAN 
Accelerator. Domain controllers default to Required. 

You can identify poor CIPS performance by the examining the HP EPS WAN 
Accelerator log files in the Management Console. 

Client-side HP EPS WAN Accelerator: 

Jan 22 00:01:11 dfcfel sport[3940]: [ smbcf e . WARN] 728 {10.0.0.14:1605 
10.0.0.4:445) Cifs parser shutting down due to 

error=SMB_SHUTDOWN_ERR_SEC_SIG_ENABLED . Security signatures are enabled 
on the server. Disabling latency optimization, only bandwidth will be 
optimized. 

Server-side HP EPS WAN Accelerator: 

Jan 22 00:04:49 dfcfel sport[3940]: [ smbcf e . WARN] 733 {10.0.100.86:4688 
10.0.0.4:445) Received cifs shutdown request from SFE: 
error=SMB_SHUTDOWN_ERR_SEC_SIG_ENABLED 

To enable Secure-CIFS 1. Connect to the HP EPS WAN Accelerator CLI. Por detailed information, 

see the HP EFS WAN Accelerator Command-Line Interface Reference Manual. 

2. Enter configuration mode. At the system prompt enter the following set of 
commands: 

minna> enable 

minna # configure terminal 
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minna (config) # 

3. At the system prompt, enter the following command: 

minna (config) # protocol cifs secure-sig-opt enable 
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CHAPTER 3 Advanced Network Deployments 



In This Chapter This chapter provides an overview of advanced network deployments and 

summarizes the basic steps for configuring them. This chapter includes the 
following sections: 

♦ 'Tn-Path Deployments," next 

♦ "Out-of-Path Deployments" on page 55 

♦ "Mixed Deployments" on page 59 

This chapter assumes you are familiar with the HP EPS WAN Accelerator 
Management Console (Management Console). For detailed information about 
the Management Console and how to use it, see the HP EPS WAN Accelerator 
Management Console User's Guide. 

This chapter provides the basic steps for advanced network deployments. It 
does not provide detailed procedures. Use this chapter as a general guide to 
these deployments. If you need additional assistance, contact HP Technical 
Support located at http://www.hp.com. 

For detailed information about the factors you must consider before you 
design and deploy the HP EPS WAN Accelerator in a network environment, 
see "Design and Deployment Overview" on page 17. 
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The following section describes in-path network configurations where the HP 
EFS WAN Accelerator is located in the direct path of the client, server, and 
Wide Area Network (WAN). 

Figure 3-1. In-Path, Client and Server-Side Deployment 

Server 




In-Path, Failover 
Support 



An in-path, fail-over support deployment serves offices with one WAN 
routing point and where failover support is required. This deployment is cost 
effective, simple to manage, and continues to optimize data if there is an error 
in the system. 

The following figure illustrates the client-side of the network where redundant 
HP EFS WAN Accelerators are deployed to provide optimization of data. 

Figure 3-2. In-Patli, Failover Deployment 




Basic Steps 
(Client-Side) 



Perform the following steps for each client-side HP EFS WAN Accelerator. 

1. Configure the HP EFS WAN Accelerator in an in-path configuration. For 
details see, "Configuring In-Path HP EFS WAN Accelerators" on page 28. 

2. Connect to the Management Console. For details see, "Connecting to the 
Management Console" on page 33. 

3. Enable failover support in the Setup: Service, Configuration page of the 
Management Console. For example: 

♦ On HP EFS WAN Accelerator A: specify HP EFS WAN Accelerator A 
as the master and specify the Internet Protocol (IP) address of HP EFS 
WAN Accelerator B as the buddy IP address. 
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Setup 

■ Uet'.vorking 

■ Senrice « 

■ Protocols 

■ Alarms 

■ Logging 

■ Reports 

■ Date a Time 

■ Accounts 

■ Configuration Manager 

■ Upgrade Software 

■ Update Uoense 

■ Startystop Service 

■ Reboot Appliance 

■ Shutdown Appliance 



Lo^litgi : Help 



♦ On HP EPS WAN Accelerator B: specify HP EPS WAN Accelerator B as 
the backup and specify the IP address of HP EPS WAN Accelerator A as 
the buddy IP address. 

Figure 3-3. Management Console Setup: Service, Configuration Page 

O Logged in as; admin Oogout) 



, Service 



In-Path Rules 



I Configuration 

Q Check and modify your base service configuration, 



WCCPServiceGroups Asvmmetnc RDuting 



In -Path 

0 Enable In-Path Support 
Options; 

Q Enable External Traffic Redirection Support 5.ayer4/PBRA''i'CCP) 
I I Reset Existing Client Connections on Start Up 



VLANTagID; 0 



Out-of-Path 

Q Enable Out-of-Patti Support 



Local Port; 7810 



Authentication (Optional) 

I I Enable Auttientication 

Client Secret; | 
Server Secret; 



Faibver [Optional- Requires an Additional Appliance} 

0 Enable Failover Support 

Mode; I Master v~| 

Buddy IP Address; |lO,0,[i,3| | 



1 Apply ] 5f , e I Reset ] 

4. Apply and save the new configuration in the Management Console. 

5. Begin optimization. View performance reports and system logs in the 
Management Console. 

Basic Steps The server-side HP EPS WAN Accelerator is configured as an in-path device. 

(Server-Side) For detailed information, see "Configuring In-Path HP EPS WAN 

Accelerators" on page 28. 



In-Path, Two An rn-path, two routing point deployment serves offices with two WAN 

Rout! no Pol ntS routing points and redundant HP EPS WAN Accelerators. This deployment is 

simple to manage, provides failover support, and load balances traffic. You 
must configure the Interior Gateway Protocol (IGP) to prefer HP EPS WAN 
Accelerator links over non-HP EPS WAN Accelerator links for load balancing 
to occur and to avoid asymmetric routing. 
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The following figure illustrates the client-side of the network where two in- 
path HP EPS WAN Accelerators are configured as in-path interfaces. 

Figure 3-4. In-Rath, Two Routing Points Deployment 




Basic Steps 
(Client-Side) 



Perform the following steps on each client-side HP EPS WAN Accelerator. 

1. Configure the HP EPS WAN Accelerator in an in-path configuration. Por 
details see, "Configuring In-Path HP EPS WAN Accelerators" on page 28. 

2. Connect to the Management Console to verify your configuration. Por 
details see, "Connecting to the Management Console" on page 33. 

3. Configure your Interior Gateway Protocol (IGP) to prefer links A and B 
over links C and D. 

4. Begin optimization. View performance reports and system logs in the 
Management Console. 



Basic Steps 
(Server-Side) 



The server-side HP EPS WAN Accelerator is configured as an in-path device. 
Por detailed information, see "Configuring In-Path HP EPS WAN 
Accelerators" on page 28. 



In-Path, Server- An in-path, server-side deployment serves a single server or server subnet. 
21^0 This deployment is simple to manage and LAN traffic is passed-through. It 

does not provide failover support if there is an error in the system. 

This deployment is useful in environments where most of the server-side 
traffic is out-of-path but there are applications that originate on the server-side 
that require optimization (for example, backup software, software distribution 
suites, or other similar applications). 
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The following figure illustrates a server-side subnet where the HP EPS WAN 
Accelerator is deployed to provide data center clients with optimized data. 

Figure 3-5. In-Rath, Server-Side Deployment 



Data Center LAN 




Basic Steps The client-side HP EPS WAN Accelerator is configured as an in-path device. 

(Client-Side) For detailed information, see "Configuring In-Path HP EPS WAN 

Accelerators" on page 28. 

Basic Steps Perform the following steps on the server-side HP EPS WAN Accelerator. 

(Server-Side) 
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Setup 

■ Sennce « 

■ ProtBcols 

■ Alarms 

■ Logging 

■ Reports 

■ Date a Time 

■ AoDDunts 

■ Configuration Manager 

■ Upgrade Software 

■ Update Ucaise 

■ Startystop Service 

■ Reboot Appliance 

■ Shutdown Appliance 



1. Configure the HP EPS WAN Accelerator in an in-path configuration. Por 
details see, "Configuring In-Path HP EPS WAN Accelerators" on page 28. 

2. Define in-path, fixed-target rules for traffic you want to optimize. Por 
detailed information about in-path rules and configuring them, see the HP 
EPS WAN Accelerator Management Console User's Guide. 

Figure 3-6. Management Console Setup: Service, In-Path Rules, Fixed Target Page 

^^^P oO Logged in as; admin Oogout) 



:. Service S' # 











r ConfiguratiDii ]| 


In-Path Rules |l 


QdS T WCCP Service Groups T Asymuketrk Routing 




^ Check and modif;/ 


/our in-path rules. E 


y default, all traffic going through this appliance is optimized. 




1 # Action 


Source 


[>est]iHt]aii Port VLAHID Taiyet 


Port 1 



de" A.. ;c.Ds ail all all all 



Remove Selected Rules 



Add New Rule: ^^^^^^^Bf Fixed Target 




Q Fixed target rules directly specif/ out-of-path appliances near the target server. 


Insert Rule Before; | end v | 




Source Subnet; |l0.0.0.3 | 


Netmask: |255.Z55.0.0 | 


Destination Subnet; |l0.10.1Z. 1 | 


Netmask; |255.Z55.0.o| | Port |all | 


Target IP Address; | | 


Port; Its 10 1 


Backup Target IP Address; | | 


Port; Its 10 1 


VLANTagID; |aII v-| 




li Add Rule J 





Additional Options; 




0 Automatically Pass Through Traffic for Krio'A'n Secure Ports 




[7] Automatically Pass Through Trat^c for fCriown Interactive Ports 


[Apply] 



I Sav e I Reset | 



3. Connect to the Management Console to verify your configuration. Por 
details see, "Connecting to the Management Console" on page 33. 

4. Begin optimization. View performance reports and system logs in the 
Management Console. 



In-Path, Server- An in-path, server-side, 1:1 deployment is appropriate for data center LANs 
Side 1 ■ 1 where you want to optimize applications on a single server or server subnet. 

' This deployment is simple to manage and LAN traffic is passed-through. It 

accelerates one server with 100 Mbps of WAN traffic. 
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Basic Steps The client-side HP EPS WAN Accelerator is configured as an in-path device. 

(Client-Side) For detailed information, see "Configuring In-Path HP EPS WAN 

Accelerators" on page 28. 



Basic Steps Perform the following steps for each of the server-side HP EPS WAN 

(Server-Side) Accelerators. 

1. Configure the HP EPS WAN Accelerator in an in-path configuration. Por 
details see, "Configuring In-Path HP EPS WAN Accelerators" on page 28. 

2. Connect to the Management Console to verify your configuration. Por 
details see, "Connecting to the Management Console" on page 33. 

3. Enable failover support in the Setup: Service, Configuration page of the 
Management Console. Por example: 

♦ On HP EPS WAN Accelerator A: specify HP EPS WAN Accelerator A 
as the master and specify the IP address of HP EPS WAN Accelerator B 
as the buddy IP address. 
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Setup 

■ lietA'orking 

■ Senrice « 

■ ProtDcols 

■ Alarms 

■ Logging 

■ Reports 

■ Date a Time 

■ Accounts 

■ Configuration Manager 

■ Upgrade Software 

■ Update Uoense 

■ Startystnp Service 

■ Reboot Appliance 

■ Shutdown Appliance 



♦ On HP EPS WAN Accelerator B: specify HP EPS WAN Accelerator B as 
the backup and specify the IP address of HP EPS WAN Accelerator A as 
the buddy IP address. 

Figure 3-8. Management Console Setup: Service, Configuration Page 



Lowing i Help 



sCV Logged in as; admin Oogout) 



, Service 



In-Pdth Rules 



[" Co-nfigu ration "jj 

Q Check and modify your base service configuration, 



WCCP Service Groups Asvmmetric Routing 



In -Path 



0 Enable In-Path Support 
Options; 

□ Enable External Tratlii: Redirection Support 0.ayer4/t=BRA'VCCP) 
I I Reset Existing Client Connections on Start Up 



VLANTagID; 0 



Out-of-Path 



n Enable Out-of-Patti Support 



Local Port; 7810 



Authentication (Optional) 

I I Enable Authentication 



Client Secret; 
Server Secret; 



Faibver [Optional - Requires an Additional Appliance) 

0 Enable Failover Support 

Mode; Master v 



Buddy IP Address; 10,0,0,31 



ll Apply i Is 



4. Apply and save the new configuration in the Management Console. 

5. Begin optimization. View performance reports and system logs in the 
Management Console. 



In-Path, Load 
Balanced, 
Layer-4 Switch 



An in-path, load-balanced, Layer-4 switch deployment serves high traffic 
environments or environments with large numbers of active TCP connections. 
It handles failures, scales easily, and supports all protocols. 

When you configure the HP EPS WAN Accelerator using a Layer-4 switch, you 
define the HP EPS WAN Accelerators as a pool where the Layer-4 switch 
redirects client and server traffic. 



52 



3 - Advanced Network Deployments 



Only one WAN interface on the HP EPS WAN Accelerator is connected to the 
Layer-4 switch, and the HP EPS WAN Accelerator is configured to send and 
receive data through that interface. 

The following figure illustrates the server-side vof the network where load 
balancing is required. 

Figure 3-9. In-Rath, Load-Balanced, Layer-4 Switch Deployment 




Basic Steps The client-side HP EPS WAN Accelerator is configured as an in-path device. 

(Client-SidG) For detailed information, see "Configviring In-Path HP EPS WAN 

Accelerators" on page 28. 



Basic Steps Perform the following steps for each HP EPS WAN Accelerator in the cluster. 

(Server-Side) 

1. Mount and power on the HP EPS WAN Accelerator. Por details see, 
"Mounting the HP EPS WAN Accelerator to a Rack" on page 21 and 
"Powering On the HP EPS WAN Accelerator" on page 25. 



2. Connect to the HP EPS WAN Accelerator. Por details see, "Connecting to 
the HP EPS WAN Accelerator" on page 26. Make sure you properly 
connect to the Layer-2 switch. Por example: 

♦ On HP EPS WAN Accelerator A: plug the straight- through cable into 
the NICl (Primary) port of the HP EPS WAN Accelerator and connect it 
to the LAN port of the Layer-2 switch. 

♦ On HP EPS WAN Accelerator B: plug the straight- through cable into 
the NICl (Primary) port of the HP EPS WAN Accelerator and connect it 
to the LAN port of the Layer-2 switch. 



3. Configure the HP EPS WAN Accelerator in an rn-path configuration. Por 
details see, "Configuring In-Path HP EPS WAN Accelerators" on page 28. 



4. Connect the Layer-4 switch to the HP EPS WAN Accelerator: 

♦ On HP EPS WAN Accelerator A: plug the straight- through cable into 
the NICl (Primary) port of the HP EPS WAN Accelerator and the WAN 
port on the Layer-4 switch. 
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♦ On HP EPS WAN Accelerator B: plug the straight-through cable into 
the NICl (Primary) port of the HP EPS WAN Accelerator and the WAN 
port on the Layer-4 switch. 

5. Connect to the Management Console to verify your configuration. Por 
details see, "Connecting to the Management Console" on page 33. 

6. Enable Layer-4 switch support in the Setup: Service, Configuration page of 
the Management Console. Por example: 

♦ Click Enable External Traffic Redirection Support (Layer-4, WCCP, 
PBR). 



NOTE: The Enable In-Path Support check box is already checked — you specified in- 
path support in the configuration wizard. 



Figure 3-10. Management Console Setup: Service, Configuration Page 



hlome : Setup : Reports : Logging : Help 



. Service 



■ NetA'orking 

■ Service « 

■ Protocols 

■ Alarms 

■ Logging 



■ Configuration Manager 

■ Upgrade Software 

■ UfxJate License 



■ Start/Stop Service 

■ Reboot Appliance 

■ Shutdown Appliance 



Logged in as: admin '[logout) 



e>0 



In- Path Rules 



1^ Configuration 

9 check and modif-f your base service configuration, 



WCCP Servke Groups Asymntetric Routing 



In-Path 



0 Enable In-Path Support 
Option sr 

0 Enable External Traffic Redirection Support 0-ayer4/PER/V';CCP) 
Q Reset Existing Client Connections on Start Up 



VLANTagID: 0 



□ Enable Out-of-Path Support 



Local Port; 7810 



Authentication (Option a I) 

I I Enable Autiientication 

Client Secret; | 
Server Secret; 



Failover [Optional - Requiresan Additional Appliance} 

I I Enable Failover Support 

Mode; | Master v] 

Buddy IP Address; | | 



[Appivi I Save ' [ Reset ] 



54 



3 - Advanced Network Deployments 



7. Apply and save the new configuration in the Management Console. 

8. Reboot the HP EPS WAN Accelerator in the Setup: Reboot Appliance page 
of theManagement Console. 

9. Begin optimization. View performance reports and system logs in the 
Management Console. 



Out-of-Path Deployments 

An out-of-path deployment is a network configuration in which the HP EPS 
WAN Accelerator is not in the direct path between the client and the server. 

Figure 3-11. Out-of-Path Deploymen 




Accelerator 



Tj^ically, in an out-of-path deployment the client-side HP EPS WAN 
Accelerator is configured as an in-path interface and the server-side HP EPS 
WAN Accelerator is configured as an out-of-path interface. 

In a two appliance out-of-path deployment, when both HP EPS WAN 
Accelerators are functioning properly, the connections traverse the master 
appliance. If the master HP EPS WAN Accelerator fails, subseqvient 
connections traverse the backup HP EPS WAN Accelerator. 

When the master HP EPS WAN Accelerator is restored, the next connection 
traverses the master HP EPS WAN Accelerator. If both HP EPS WAN 
Accelerators fail, the connection is passed through unoptimized to the server. 



Out-of-Path, 

Failover 

Support 
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The following figure illustrates the server-side of the network where two HP 
EPS WAN Accelerators are deployed in an out-of-path configuration to ensure 
that data continues to be optimized if there is an error in the system. 

Figure 3-12. Out-of-Path, Server-Side, Failover Support Deployment 



Data Center LAN 




Basic Steps in an out-of-path, two HP EPS WAN Accelerators with failover support 

(Client-Side) deployment, the client-side HP EPS WAN Accelerator is configured in an in- 

path configuration with fixed-target rules that point to the server-side, out-of- 
path HP EPS WAN Accelerators. 
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■ Nebvorking 
■Semoe*! 

■ Protocols 

■ Alarms 

■ Logging 

■ Reports 

■ DatE STime 

■ Accounts 

■ Configuration Manager 

■ Upgrade Software 

■ Update UcBnse 

■ Start^top Service 

■ Reboot Appliance 

■ Shutdown Appliance 



1. Configure the client-side HP EPS WAN Accelerator in a typical in-path 
configuration. Por detailed information, see "Configuring In-Path HP EPS 
WAN Accelerators" on page 28. 

2. Connect to the Management Console. Por details, see "Connecting to the 
Management Console" on page 33. 

3. Navigate to the Setup: Service, In-Path Rules, Pixed-Target page in the 
Management Console. 



Logging Help 



Figure 3-13. Management Console: Setup, Service, Configuration Page 

Logged in as; admin logout) 











)aS T WCCP Service Groups T Asvniinetnc Roiitiiig ^^^^^^^1 




Q check and modifi/ your in-path rules. 


default, all traffic going through this appliance is optimized, 




# Action Sourve 


DestiiHtiDn l>«rt VLAHID Target 


Port 


def Auto Discover all 


all all all 





f Remove Selected Rules 



Add New Rule; 



Pass Through 



Q Fixed target rules directiy specify out-of-path appliances near the target server, 



Insert Rule Before: 
Source Subnet; 
Destination Subnet; 
Target IP Address; 
Backup Target IP Address; 
VLANTag ID; 



Netmask; 0,0,0,0 



I Netmask; |0, 0,0,0 
I Port; ' 
I Port; 



|7810 

Its 10 



I Add Rule 



Additional Options: 

0 Automaticallv Pass Through Traffic for Known Secure Ports 
0 Automafjcally Pass Through Traffic for Known Interactive Ports 



[ Save [Reset J 



4. To enable failover support for the out-of-path HP EPS WAN Accelerator, 
define a fixed-target rule that points to the appliance. Por example: 

♦ Type the out-of-path, server-side HP EPS WAN Accelerator IP address 
and port in the Target IP Address and Port text boxes. 

♦ Type the backup HP EPS WAN Accelerator IP address and port in the 
Backup Target IP Address and Port text boxes. 



5. Save and apply the new configuration in the Management Console. 

6. Begin optimization. View performance reports and system logs in the 
Management Console. 
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Basic Steps 
(Server-Side) 



The server-side HP EPS WAN Accelerator is configured as an out-of-path 
device. For detailed information, see "Configuring Out-of-Path HP EPS WAN 
Accelerators" on page 35. 



An out-of-path, static cluster deployment is appropriate when an in-path 
deployment is not an option or you require LAN-side Gigabit Ethernet. This 
deployment handles failures and scales to very high traffic levels. You must 
configure the remote HP EPS WAN Accelerator. 

The following figure illustrates the server-side of the network where two HP 
EPS WAN Accelerators are out-of-path interfaces and the client-side of the 
network where there are static clusters with in-path HP EPS WAN 
Accelerators. 

Figure 3-14. Static Cluster Deployment 




Basic Steps Perform the following steps for each HP EPS WAN Accelerator on the client- 

(Client-Side) side of the network. 

1. Configure the HP EPS WAN Accelerator in an in-path configuration. Por 
details see, "Configuring In-Path HP EPS WAN Accelerators" on page 28. 

2. Connect to the Management Console to verify your configuration. Por 
details see, "Connecting to the Management Console" on page 33. 

3. Navigate to the Setup: Service, In-Path Rules, Pixed-Target page in the 
Management Console. 

4. Define fixed target rules for the set of HP EPS WAN Accelerators in each 
cluster of user sites in the Setup: Service, In Path Rules, Pixed-Target page. 
Por example: 

♦ In the Northern region, for the HP EPS WAN Accelerators in the set, 
define HP EPS WAN Accelerator 1 as the fixed target for servers in 
Subnet S. 



Out-of-Path, 
Static Cluster 
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■ Net?A'orking 

■ ServKe ^ 

■ Protocols 

■ Alarms 

■ Logging 

■ Reports 

■ Date aTlme 

■ Accounts 



■ Configuration Manager 

■ Upgrade Software 

■ Update License 



■ Start/Stop Service 

■ Reboot Appliance 

■ Shutdown Appliance 



♦ In the Southern region, for all HP EPS WAN Accelerators in the set, 
define HP EPS WAN Accelerator 2 as the fixed target for Subnet S. 

Figure 3-15. Management Console, Setup: In-Rath, In-Rath Rules, Fixed Target Rage 



(bQ Loggedinasiadmin^ogout) 



; Service 




e>0 








1 ConFigurBtwn ]| 






Q Check and modify 


/our in-path rules, By default, all traffic going through this appliance is optimized, 




1 # AcUdii 


Source DesUnaUDii Port VLAMID Target 


Port 1 



def Auto Discover all all all all 



Remove Selected Rules 



Add r^ew Rule; ^^^^^^^^f FixedTarget "j^^^^^^^^ 


Q Fixed target rules directly spedtV out-of-path appliances near the target server, 


Insert Rule Before; | end v| 




Source Subnet; 1 10,0.0,3 


1 Netmask; |255, 255.0,0 | 


DesSnaticnSubnet; |lO,10,12,l 


1 Netmask; |255,255.0,o| | Port; |all | 


Target IP Address; | 


1 Port; |7810 1 


Backup Target IP Address; | 


1 Port: Its 10 1 


VLANTagID; | All v j 




[ Add Rule J 





Additional Options: 




0 Automaticallv Pass Ttirough Trat^c for Known Secure Ports 




0 Automatically Pass Through Tratflc fbr Known Interactive Ports 


1 Apply 1 



I Save I [ Reset ] 



5. Apply and save the new configuration in the Management Console. 

6. Begin optimization. View performance reports and system logs in the 
Management Console. 



Basic Steps Por the server-side, redundant HP EPS WAN Accelerators, follow the 

(Server-Side) procedures for an out-of-path, failover support deployment. Por detailed 

information, see "Out-of-Path, Pailover Support" on page 55. 



Mixed Deployments 

The following section describes deployments that are both rn-path and out-of- 
path. The following deployments display in-path and out-of-path 
characteristics: 
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♦ Hybrid. A hybrid deployment is a deployment in which the HP EPS 
WAN Accelerator is both in-path and out-of-path. This deployment is 
useful where the HP EPS WAN Accelerator must be referenced from 
remote sites as an out-of-path device (for example, to avoid mistaken 
auto-discovery or to bypass intermediary HP EPS WAN Accelerators). 

♦ Web Cache Communication Protocol (WCCP). WCCP enables the client- 
side to have an out-of-path HP EPS WAN Accelerator. Por example, if you 
have two routers or it there is not a logical place the HP EPS WAN 
Accelerator. You can place the HP EPS WAN Accelerator logically in-path 
through the router so that they work together. 

♦ Policy Based Routing (PBR). PBR enables you to redirect traffic to an HP 
EPS WAN Accelerator that is configured as an out-of-path interface. PBR 
allows you to define policies to route packets instead of relying on routing 
protocols. You define policies to redirect traffic to the HP EPS WAN 
Accelerator and policies to avoid loop-back. 



Hybrid: In-Path 
and Out-of-Path 



A hybrid deployment serves offices with one WAN routing point and users, 
but the HP EPS WAN Accelerator must be referenced from remote sites as an 
out-of-path device. 

Figure 3-16. Hybrid: In-Path and Out-of-Path Deployment 





WAN 



Basic Steps 
(Client-Side) 



Perform the following steps for the HP EPS WAN Accelerator. 
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■ NetA'orking 

■ Senrice « 

■ Protocols 

■ Alarms 

■ Logging 

■ Reports 

■ Date a Time 

■ Accounts 



■ Configuration Manager 

■ Upgrade Software 

■ Update License 



■ Start/Stop Service 

■ Reboot Appliance 

■ Shutdown Appliance 



1. Configure the HP EPS WAN Accelerator in an out-of-path configuration. 
Por details see, "Configuring Out-of-Path HP EPS WAN Accelerators" on 
page 35. 

2. Connect to the Management Console to verify your configuration. Por 
details see, "Connecting to the Management Console" on page 33. 



3. Define fixed target rules. In the Setup: Service, In Path Rules, Pixed-Target 
page, define fixed target rules that optimize data for a specific subnet. Por 
example: 



Logging ; Help 



Figure 3-17. Management Console, Setup: In-Rath, In-Path Rules, Fixed Target Page 

Logged in as: admin Oogout) 



SerTfice 











QdS T WCCP Service Groups T Asymmetric Raiitjng ^^^^^^^H 




Q Check and modify your in-path rules. [ 


y default, all traffic going through this appliance is optimized. 




1 #■ ActiDii Source 


DesUnaUnn Port VLAHID Target 


Port 1 



def Auto Discover all 



Remove Selected Rules 1 



Add New Rule; ^^^^^^^9 f Fixed Target "j^^^^^^^^ 


^ Fixed target rules directiy spedtV out-of-path appliances near the target server, 


Insert Rule Eefbre: | end v| 




Source Subnet: 1 10.0.0.3 


1 Netmask.; |Z55.255.0.0 | 


Destinatton Subnet; |lO,10.1Z,l 


1 Netmask; |255,Z55,0,o| | Port; |all | 


Target IP Address: | 


1 Port: |7310 | 


BadupTargetlP Address; | 


1 Port; Its 10 1 


VLANTagID: | All v| 




\ Add Rule J 





Additional Options: 




0 Automatjcally Pass Through Traffic for Known Secure Ports 




0 Automatically Pass Through Traffic for Known Interactive Ports 


[a^ 



I Save I Reset | 



4. Apply and save the new configuration in the Management Console. 

5. Begin optimization. View performance reports and system logs in the 
Management Console. 



Basic Steps The server-side HP EPS WAN Accelerator is configured as an in— path device. 

(SerVSr-Side) For detailed information, see "Configuring In-Path HP EPS WAN 

Accelerators" on page 28. 
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WCCP WCCP establishes and maintains the transparent redirection of selected types 

of traffic flowing through a group of routers. If your network design requires 
you to configure the HP EPS WAN Accelerator as an out-of-path device, you 
can use WCCP to configure the HP EPS WAN Accelerator out-of-path, yet 
redirect traffic through it to ensure it is optimized. WCCP is cost-effective, 
simple to manage, and handles complex WAN interfaces by not interfering 
with fiber, dual routers, no switch-router links, and so forth. 



IMPORTANT: HP recommends you use the HP EPS WAN Accelerator CLI to 
configure an HP EPS WAN Accelerator for WCCP. For detailed information about how 
to configure WCCP using the HP EES WAN Accelerator CLI, see the HP EPS WAN 

Accelerator Command-Line Interface Reference Manual. 



Figure 3-18. WCCP Deployment 
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Basic Steps 
(Client-Side) 



Perform the following steps for the client-side HP EPS WAN 
Accelerator.Configure the HP EPS WAN Accelerator in an in-path 
configuration. Por details see, "Configuring In-Path HP EPS WAN 
Accelerators" on page 28. 

6. Connect to the Management Console. Por details see, "Connecting to the 
Management Console" on page 33. 

7. Enable external traffic redirection in the Setup: Service, Configuration page 
of the Management Console. 

Figure 3-19. Setup: Service, Configuration Page 



Home : Setup : Reports : Logging : Help 



. Service 



sO Logged in as; admin (logout) 



In- Path Rules 



■ Protocols 

■ Alarms 

■ Logging 

■ Reports 

■ Date a Time 



■ Configuration (Manager 

■ Upgrade Software 

■ Update License 

■ Start/Stop Service 

■ Reboot Appliance 

■ Shutdown Appliance 



[ Configuration 

'J Check and modii^/ your base service configuration 



WCCP Service Groups Asvminetric RoiiUng 



In-Path 



0 Enable In-Path Support 
Option 

[7] Enable External Trafflc Redirection Support 3.ayer4f BRA"/CCP) 
I I Reset Existing Client Connections on Start Up 



VLANTagID; 0 



□ Enable Out-of-Patti Support 



Local Port: JBIO 



Authentication (Optional) 

I I Enable Authentication 

Client Secret; | 
Server Secret; 



Failovei' [Optional - Requiresan Additional Appliance) 

I I Enable Failover Support 

Mode; I Master -^il 

Buddy IP Address: 



Save ' Reset 
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■ Networking 
■Senrice« 

■ Protocols 

■ Alarms 

■ Logging 

■ Reports 

■ Date a. Time 

■ Accounts 



■ Configuration Manager 

■ Upgrade SoftA'are 

■ Update License 



■ Startystop Service 

■ Reboot Appliance 

■ Shutdown Appliance 



Logging : Help 



8. Define WCCP service groups in the Setup: Service, WCCP Groups page. 
Figure 3-20. Setup: Service, WCCP Service Groups Page 

i^i. Logged in as: admin Ocigout) 



Service 



CDinfiguratlDii I In-Path Rules 



^^[^ WCCP ServiceGroups ] 



Asymmetric Routing 



? This page is optional, Check and modiff your WCCP v2 service groups, Click on a service grc»up to modify its settings, 



Service Group ID 


Prioiitv 


Weight 


Sdieme 1 


At" ^VCCP serwce groi/psr 



Remove Selected Groups 

Add New Service Group: 

Service Group ID; 
Router IP: 
Password; 
Confirm Password; 
Priorit,'; 
Weight; 

Encapsulation Scheme; 



Add Group 



WCCP v2 Globa I Settings 

□ Enable WCCP v Z Support 



Multicast TTL; 1 



Update Settings 



Save Reset 
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■ Networking 

■ Senn™ « 
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■ Alarms 

■ Logging 

■ Reports 

■ Date aiime 
■Accounts 

■ Configuration Manager (!) 

■ Upgrade Software 

■ Update Ucense 

■ StartystDp Service 

■ Reboot Appliance 

■ Shutdown Appliance 



Logging : Help 



Service 



9. Edit the service groups to define flags, ports, and routers in the Setup: 
Service, WCCP Groups, Service Group page. 

Figure 3-21. Setup: Service, WCCP Groups Page 

lij Logged in as; admin logout) 



Configuratiaii I In- Path Rule 



WCCP Service Groups 



Service Group 123 

^ Check and modiiV the settings for service group 123. 



[ Return to Service Groups ] 



Group Settings 

Password; 
Confirm Password; 
Priority; 
Weight; 

Encapsulation Scheme; 



Flags 



Basic Steps 
(Server-Side) 



Update Settings 



□ Source IP Hash 0 Destination IP Hash 

□ Source Port Hash □ Destination Port Hash 



Update Flags 



No ports spedfied. 



' Remove Selected Ports | 
Add Port I I [ Add Port 



□ 10.0.0.0 



Remove Selected Routers 



Add Router IP: 



I Save J I Reset | 

10. Define WCCP policies on your router. 

11. Save and apply the new configuration in the Management Console. 

12. Begin optimization. View performance reports and system logs in the 
Management Console. 

The server-side HP EPS WAN Accelerator is configured as an in-path device. 
For detailed information, see "Configuring In-Path HP EES WAN 
Accelerators" on page 28. 
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PBR Policy-Based routing (PBR) enables you to define policies to route packets 

instead of relying on routing protocols. You enable PBR to redirect traffic that 
you want to optimize to an HP EPS WAN Accelerator that is configured as an 
out-of-path device. You must configure your router in addition to the HP EPS 
WAN Accelerator. 



TIP: HP recommends you use the HP EPS WAN Accelerator CLI to configure an HP 
EPS WAN Accelerator for PBR. For detailed information about how to configure PBR 
using the HP EPS WAN Accelerator CLI, see the HP EPS WAN Accelerator Command- 
Line Interface Reference Manual. 



The following figure illustrates the client-side of the network where the HP 
EPS WAN Accelerator is configured as an out-of-path device and the router 
has been configured with polices that enable traffic redirection. 

Figure 3-22. PBR Deployment 




Basic Steps Perform the following steps for the client-side HP EPS WAN Accelerator. 

(Client-Side) 
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■ Networking 

■ Senfflje « 

■ Protocols 

■ Alarms 

■ Logging 

■ Reports 

■ Date a Time 
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■ Configuration Manager 

■ Upgrade SofbA'are 

■ Update License 



■ Start/Stop Service 

■ Reboot Appliance 

■ Shutdown Appliance 



1. Configure the HP EPS WAN Accelerator in an in-path configuration. Por 
details see, "Configuring In-Path HP EPS WAN Accelerators" on page 28. 

2. Connect to the Management Console. Por details see, "Connecting to the 
Management Console" on page 33. 

3. Enable external traffic redirection in the Setup: Service, Configuration page 
of the Management Console. 

Figure 3-23. Setup: Service, Configuration Page 



LDMinp : Help 



Service 



a O Logged in as; admin (logout) 



In- Path Ruls 



[ Configuration 

Check and modif;/ your base service configuration 



WCCP Service Groups Asvmmetric Routing 



In -Path 



0 Enable In-Path Support 
Options; 

[7] Enable External TrafHc Redirection Support (Layer4/PBR/rtCCP) 
I I Reset Existing Client Connections on Start Up 



VLANTasID; lO 



□ Enable Out-of-Patti Support 



Local Port; 7B10 



Authentication (Optional] 

I I Enable Authentication 



Client Secret: 
Server Secret; 



Failover (Optional - Requires an Additional Appliance) 

I I Enable Failover Support 



Mode; I Master v | 

Buddy IP Address; 



I appIvI I Save | [ Reset ] 

4. Define PBR policies on your router. 

5. Save and apply the new configuration in the Management Console. 

6. Begin optimization. View performance reports and system logs in the 
Management Console. 



Basic Steps 
(Server-Side) 



The server-side HP EPS WAN Accelerator is configured as an in-path device. 
Por detailed information, see "Configuring In-Path HP EPS WAN 
Accelerators" on page 28. 
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- Advanced Network Deployments 



Recovering from a Disaster 



In This Chapter if the hp EFS wan Accelerator sustains hardware failures, you can use the 

Quick Restore CD you received with your product to restore your appliance 
storage configuration and disk image to the original factory settings. This 
chapter explains the recovery procedure. 



NOTE: Cached data and configuration changes you made to the system are not 
recovered. 



Recovery Procedure 

1. Insert the Quick Restore CD in the HP EFS WAN Accelerator or HP EFS 
WAN Accelerator Manager DVD-ROM drive. 

2. Reboot the server by turning off and then turning on the power. 
The system boots and the CD loads. 

3. When prompted by the system, select R to restore your appUance storage 
configuration and disk image to the factory settings. 



HP StorageWorks Enterprise File Services WAN Accelerator Installation and Configuration Guide 



69 



4 Recovering from a Disaster 



CHAPTER 5 



Replacing HP EPS WAN 
Accelerator Components 



In This Chapter 



The HP ProLiant DL320-510, DL320-1010, and DL320-2010 and the HP 
ProLiant DL380-3010 and DL380-5010 contain replaceable fans, disk drives, 
and power supply units. For replacement procedures, refer to either the HP 
ProLiant DL320 Generation 3 Server Maintenance and Service Guide or the HP 
ProLiant DL380 Generation 4 Maintenance and Service Guide available on the web 
from the link on the documentation CD-ROM that came with your product. 
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- Replacing HP EFS WAN Accelerator Components 



APPENDIX A 



Technical Specifications and 
Regulatory Information 



In This Appendix 



Technical specifications and regulatory information are contained in the 
documentation for your product. Refer to either the HP ProLiant DL320 
Generation 3 Server User Guide or the HP ProLiant DL380 Generation 4 Server 
Reference and Troubleshooting Guide available on the documentation set CD- 
ROM that came with your product for specific information. 
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HP EPS WAN Accelerator Ports 



In This Appendix This appendix describes the HP EPS WAN Accelerator default, secure, and 

interactive ports. It contains the following sections: 

♦ "Default Ports," next 

♦ "Commonly Optimized Ports" on page 75 

♦ "Interactive Ports Automatically Forwarded by the HP EPS WAN 
Accelerator" on page 76 

♦ "Secure Ports Automatically Forwarded by the HP EPS WAN 
Accelerator" on page 76 



Default Ports 

The HP EPS WAN Accelerator uses the following default ports. 

♦ In-Path Listening Port: 7800 

♦ Out-of-Path Server Port: 7810 

♦ Failover Port: 7820 

♦ Exchange Port: 7830 



Commonly Optimized Ports 

The HP EPS WAN Accelerator by default optimizes all ports. If you do not 
want the HP EPS WAN Accelerator to optimize all ports for an in-path or out- 
of path configuration, you can specify specific ports for optimization. 

Although these ports can vary according to your requirements, the following 
ports are commonly specified for in-path and out-of-path configurations: 

♦ 80 

♦ 135 

♦ 139 
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♦ 445 



♦ 7830 



Interactive Ports Automatically Forwarded 
by the HP EFS WAN Accelerator 



The following interactive ports are automatically forwarded by the HP EFS 
WAN Accelerator when you enable forwarding of interactive ports in the 
Management Console. 



Port 


Description 


7 


TCP ECHO 


23 


Telnet 


37 


UUP /lime 


107 


Remote Peine t Service 


513 


Remote Login 


514 


Shell 


3389 


MS WBT Server, TS/Remote Desktop 


5631 


PC An3where 


5900-5903 


VNC 


6000 


Xll 



For detailed information about how to set interactive port forwarding, see the 
HP EFS WAN Accelerator Management Console User's Guide. 



Secure Ports Automatically Forwarded 
by the HP EFS WAN Accelerator 

The following tables contain the secure ports that are automatically forwarded 
by the HP EFS WAN Accelerator when you enable forwarding of secure ports 
in the Management Console. 



B - HP EFS WAN ACCELERATOR Ports 



For detailed information about how to enable forwarding of secure ports, see 
the HP EPS WAN Accelerator Management Console User's Guide. 



Type 


Port 


Description 


ssh 


22/tcp 


SSH Remote Login Protocol 


https 


443/tcp 


http protocol over TLS/SSL 


smtps 


465/tcp 


SMTP over SSL (XLS) 


nntps 


563/tq) 


nntp protocol over TLS/SSL (was snntp) 


imap4-ssl 


585/tcp 


IMAP4+SSL (use 993 instead) 


sshell 


614/tcp 


SSLshell 


Idaps 


636/tq) 


Idap protocol over TLS/SSL (was sldap) 


ftps-data 


989/tcp 


ftp protocol data over TLS/SSL 


ftps 


990/tcp 


ftp protocol control over TLS/SSL 


telnets 


992/tcp 


telnet protocol over TLS/SSL 


imaps 


993/tcp 


iniap4 protocol over TLS/SSL 


pop3s 


995/tcp 


pop3 protocol over TLS/SSL (was spop3) 


12tp 


1701 /tq) 


12tp 


pptp 


1723/tq) 


pptp 


tftps 


3713/tq) 


TFTP over TLS 


The following table contains the uncommon ports automatically forwarded by 
the HP EFS WAN Accelerator. 


Type 


Port 


Description 


nsiiops 


261 /top 


nop Name Service over TLS/SSL 


ddm-ssl 


448/tcp 


DDM-Remote DB Access Using Secure Sockets 


corba-iiop-ssl 


684/tcp 


CORBA HOP SSL 


ieee-mms-ssi 


695/tcp 


lEEE-MMS-SSL 


ires 


994/tcp 


ire protocol over TLS/SSL 


njenet-ssl 


2252/tcp 


NJENET using SSL 


ssm-cssps 


2478/tcp 


SecurSight Authentication Server (SSL) 


ssm-els 


2479/tcp 


SecurSight Event Logging Server (SSL) 


giop-ssl 


2482/tcp 


Oracle GIOP SSL 


ttc-ssl 


2484/tcp 


Oracle TTC SSL 


syncserverssl 


2679/tcp 


Sync Server SSL 


dicom-tls 


2762/tcp 


DICOM TLS 


realsecure 


2998/tcp 


Real Secure 


orbix-loc-ssl 


3077/tcp 


Orbbc 2000 Locator SSL 
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Type 


Port 


Description 


orbix-cfg-ssl 


3078/tcp 


Orbix 2000 Locator SSL 


cops-tls 


3183/tcp 


COPS/TLS 


csvr-sslproxy 


3191/tcp 


ConServR SSL Proxy 


xnm-ssl 


3220/tcp 


XML NM over SSL 


msft-gc-ssl 


3269/tcp 


Microsoft Global Catalog with LDAP/SSL 


networklenss 


3410/tcp 


NetworkLens SSL Event 


xtrms 


3424/tcp 


xTrade over XLS /SSL 


jt400-ssl 


3471/tcp 


jt400-ssl 


seclayer-tls 


3496/tcp 


securitylayer over tls 


vt-ssl 


3509/tcp 


Virtual Token SSL Port 


jboss-iiop-ssl 


3529/tcp 


JBoss IIOP/SSL 


ibm-diradm-ssl 


3539/tcp 


IBM Directory Server SSL 


can-nds-ssl 


3660/tcp 


Candle Directory Services using SSL 


can-ferret-ssl 


3661/tcp 


Candle Directory Services using SSL 


linktest-s 


3747/tcp 


LXPRO.COM LinkTest SSL 


asap-tcp-tls 


3864/tcp 


asap/tls tcp port 


topflow-ssl 


3885/tcp 


TopFlow SSL 


sdo-tls 


3896/tcp 


Simple Distributed Objects over TLS 


sdo-ssh 


3897/tcp 


Simple Distributed Objects over SSH 


iss-mgmt-ssl 


3995/tcp 


ISS Management Svcs SSL 


suucp 


4031/tcp 


UUCP over SSL 


wsm-server-ssl 


5007/tcp 


wsm server ssl 


sip-tls 


5061 /tcp 


SIP-TLS 


imqtiinnels 


7674/tcp 


iMQ SSL tunnel 


davsrcs 


9802/tcp 


WebDAV Source TLS/SSL 


intrepid-ssl 


11751 /tcp 


Intrepid SSL 


rets-ssl 


12109/tcp 


RETS over SSL 
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Software Licenses 
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In This Appendix This appendix lists the copyrights and licenses for the software used in the 

development of the HP EPS WAN Accelerator software. It also contains the 
copyright and license agreement for certain free libraries used in the 
development of the HP EPS WAN Accelerator software. 



Apache Copyright (c) 2000-2003 The Apache Software Foundation. All rights reserved. 

Redistribution and use in source and binary forms, with or without modification, are 
permitted provided that the following conditions are met: 

Redistiibutlons of source code must retain the above copyright notice, this list of 
conditions and the following disclaimer. 

Redistributions In binary form must reproduce the above copyright notice, this list of 
conditions and the following disclaimer in the documentation and/or other materials 
provided with the distribution. 

The name of the author may not be used to endorse or promote products derived from 
this software without specific prior written permission. 

THIS SOFTWARE IS PROVIDED "AS IS" AND ANY EXPRESS OR IMPLIED 
WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES 
OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE 
DISCLAIMED. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY DIRECT, 
INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL 
DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF 
SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR 
BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF 
LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING 
NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS 
SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. 

This product Includes software developed by the Apache Software Foundation (http:// 
www.apache.org/) . 

The Apache add-on components that we used have the following copyrights and 
requirements. Unless otherwise noted, these are also subject to the requirements of the 
basic license listed above: 



(server/util_md5.c) Portions Copyright (C) 1995, Board of Trustees of the University of 
Illinois 
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Original Code Copyright (C) 1994, Jeff Hostetler, Spyglass, Inc. 

Portions of Content-MD5 code Copyright (C) 1993, 1994 by Carnegie Mellon University 
(see Copyright below). 

Portions of Content-MD5 code Copyright (C) 1991 Bell Communications Research, Inc. 

(Bellcore) (see Copyright below). 

Portions extracted from mpack, John G. Myers - jgm+@cmu.edu 

Content-MD5 Code contributed by Martin Hamilton (martin@net.lut.ac.uk) 

Portions (C) Copyright 1993,1994 by Carnegie Mellon University. AU rights reserved. 

Portions Copyright (c) 1991 Bell Commxmications Research, Inc. (Bellcore) 

(srclib / apr / passwd / apr_md5.c) 

(srclib/ apr-util/ include/ apr_md5.h) 

(srclib/apr-util/include/apr_md4.h) 

(srclib/apr-util/ crypto/apr_md4.c) 

Copyright (C) 1991-2, RSA Data Security, Inc. Created 1991. All rights reserved. 

License to copy and use this software is granted provided that it is identified as the 
"RSA Data Security, Inc. MD5 Message-Digest Algorithm" in all material mentioning or 
referencing this software or this function. 

License is also granted to make and use derivative works provided that such works are 
identified as "derived from the RSA Data Security, Inc. MD5 Message-Digest 
Algorithm" in all material mentioning or referencing the derived work. 

RSA Data Security, Inc. makes no representations concerning either the 
merchantability of this software or the suitability of this software for any particular 
purpose. It is provided "as is" without express or implied warranty of any kind. These 
notices must be retained in any copies of any part of this documentation and/ or 
software. 

(srclib/pcre/*) 

Regular expression support is provided by the PCRE library package, which is open 
source software, written by Philip Hazel, and copyright by the University of 
Cambridge, England. 

(expat XML parser) 

Copyright (c) 1998, 1999, 2000 Thai Open Source Software Center Ltd. and Clark 
Cooper. 

bSdStr.C Copyright (c) 1998 Todd C. Miller (Todd.Miller@courtesan.com). All rights reserved. 

Redistribution and use in source and binary forms, with or without modification, are 
permitted provided that the following conditions are met: 

Redistributions of source code must retain the above copyright notice, this list of 
conditions and the following disclaimer. 
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Redistributions in binary form must reproduce the above copyright notice, this list of 
conditions and the following disclaimer in the documentation and /or other materials 
provided with the distribution. 



The name of the author may not be used to endorse or promote products derived from 
this software without specific prior written permission. 9 

o 

THIS SOFTWARE IS PROVIDED "AS IS" AND ANY EXPRESS OR IMPLIED ^ 
WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES | 
OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE C 
DISCLAIMED. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY DIRECT, g 
INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL 
DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF 
SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR 
BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF 
LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING 
NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS 
SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. 

Less Copyright (C) 1984-2002 Mark Nudelman. 

Redistribution and use in source and binary forms, with or without modification, are 
permitted provided that the following conditions are met: 

1. Redistributions of source code must retain the above copyright notice, this Ust of 
conditions and the following disclaimer. 

2. Redistributions in binary form must reproduce the above copyright notice in the 
documentation and/or other materials provided with the distribution. 

THIS SOFTWARE IS PROVIDED BY THE AUTHOR "AS IS" AND ANY EXPRESS OR 
IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED 
WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR 
PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR BE LIABLE 
FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR 
CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, 
PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR 
PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY 
THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT 
(INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF 
THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH 
DAMAGE. 



Li bevent Copyright 2000-2002 Niels Provos (provos@citi.umich.edu). All rights reserved. 

Redistribution and use in source and binary forms, with or without modification, are 
permitted provided that the following conditions are met: 

Redistributions of source code must retain the above copyright notice, this list of 
conditions and the following disclaimer. 

Redistributions in binary form must reproduce the above copyright notice, this Ust of 
conditions and the following disclaimer in the documentation and /or other materials 
provided with the distribution. 

The name of the author may not be used to endorse or promote products derived from 
this software without specific prior written permission. 
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THIS SOFTWARE IS PROVIDED "AS IS" AND ANY EXPRESS OR IMPLIED 
WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES 
OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE 
DISCLAIMED. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY DIRECT, 
INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL 
DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF 
SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR 
BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF 
LL^BILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING 
NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS 
SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. 

Li bG D Portions copyright 1994, 1995, 1996, 1997, 1998, 1999, 2000, 2001, 2002 by Cold Spring 

Harbor Laboratory. Fiinded xinder Grant P41-RR02188 by the National Institutes of 
Health. 

Portions copyright 1996, 1997, 1998, 1999, 2000, 2001, 2002 by Boutell.Com, Inc. 

Portions relating to GD2 format copyright 1999, 2000, 2001, 2002 Philip Warner. 

Portions relating to PNG copyright 1999, 2000, 2001, 2002 Greg Roelofs. 

Portions relating to gdttf .c copyright 1999, 2000, 2001, 2002 John EUson 
(ellson@graphviz.org). 

Portions relating to gdft.c copyright 2001, 2002 John EUson (ellson@graphviz.org). 

Portions relating to JPEG and to color quantization copyright 2000, 2001, 2002, Doug 
Becker and copyright (C) 1994, 1995, 1996, 1997, 1998, 1999, 2000, 2001, 2002, Thomas G. 
Lane. This software is based in part on the work of the Independent JPEG Group. See 
the file README-JPEG.TXT for more information. 

Portions relating to WBMP copyright 2000, 2001, 2002 Maurice Szmurlo and Johan Van 
den Brande. 

Redistribution and use in source and binary forms, with or without modification, are 
permitted provided that the following conditions are met: 

Redistributions of source code must retain the above copyright notice, this list of 
conditions and the following disclaimer. 

Redistributions in binary form must reproduce the above copyright notice, this list of 
conditions and the following disclaimer in the docimientation and/or other materials 

provided with the distribution. 

The name of the author may not be used to endorse or promote products derived from 
this software without specific prior written permission. 
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THIS SOFTWARE IS PROVIDED "AS IS" AND ANY EXPRESS OR IMPLIED 
WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES 
OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE 
DISCLAIMED. IN NO EVENT SHALL THE AUTHOR BE LLVBLE FOR ANY DIRECT, 
INDIRECT, INCIDENTAL, SPECL^L, EXEMPLARY, OR CONSEQUENTIAL 
DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF 
SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR 
BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF 
LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING 
NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS 
SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. 

LibteCia Copyright (c) 2000, 2001 by Martin C. Sliepherd. All rights reserved. 

Permission is hereby granted, free of charge, to any person obtaining a copy of this 
software and associated documentation files (the "Software"), to deal in the Software 

without restriction, including without limitation the rights to use, copy, modify, merge, 
publish, distribute, and/ or sell copies of the Software, and to permit persons to whom 
the Software is furnished to do so, provided that the above copyright notice(s) and this 
permission notice appear ia all copies of the Software and that both the above copyright 
notice(s) and this permission notice appear in supporting documentation. 

THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, 
EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF 
MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND 
NONINFRINGEMENT OF THIRD PARTY RIGHTS. IN NO EVENT SHALL THE 
COPYRIGHT HOLDER OR HOLDERS INCLUDED IN THIS NOTICE BE LIABLE FOR 
ANY CLAIM, OR ANY SPECIAL INDIRECT OR CONSEQUENTIAL DAMAGES, OR 
ANY DAMAGES WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR 
PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE OR OTHER 
TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR 
PERFORMANCE OF THIS SOFTWARE. 

Except as contained in this notice, the name of a copyright holder shall not be used in 
advertising or otherwise to promote the sale, use or other dealings in this Software 
without prior written authorization of the copyright holder. 

mdS, rnd5.CC Copyright(c) 1995 university of Southern California. All rights reserved. 

Redistribution and use in source and binary forms are permitted provided that the 
above copyright notice and this paragraph are duplicated in all such forms and that any 
documentation, advertising materials, and other materials related to such distribution 
and use acknowledge that the software was developed by the University of Southern 
California, Information Sciences Institute. The name of the University may not be used 
to endorse or promote products derived from this software without specific prior 
written permission. 

THIS SOFTWARE IS PROVIDED "AS IS" AND WITHOUT ANY EXPRESS OR 
IMPLIED WARRANTIES, INCLUDING, WITHOUT LIMITATION, THE IMPLIED 
WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR 
PURPOSE. 

Copyright (C) 1991-2, RSA Data Security, hic. Created 1991. All rights reserved. 

License to copy and use this software is granted provided that it is identified as the 
"RSA Data Security, Inc. MDS Message-Digest Algorithm" in all material mentioning or 
referencing this software or this function. 
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License is also granted to make and use derivative works provided that such works are 
identified as "derived from the RSA Data Security, Inc. MD5 Message-Digest 
Algorithm" in all material mentioning or referencing the derived work. 

RSA Data Security, Inc. makes no representations concerning either the 

merchantability of this software or the suitability of this software for any particular 
purpose. It is provided "as is" without express or implied warranty of any kind. 

These notices must be retained in any copies of any part of this documentation and/ or 
software. 

my_getOpt.{C,h} copyright 1997, 2000, 2001, 2002, Benjamin Siti:ler. 

Permission is hereby granted, free of charge, to any person obtaining a copy of this 
software and associated documentation files (the "Software"), to deal in the Software 
without restriction, including without limitation the rights to use, copy, modify, merge, 
publish, distribute, sublicense, and / or sell copies of the Software, and to permit 
persons to whom the Software is furnished to do so, subject to the following conditions: 

The above copyright notice and this permission notice shall be included in all copies or 
substantial portions of the Software. 

THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, 
EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF 
MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND 
NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT 
HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, 
WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING 
FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR 
OTHER DEALINGS IN THE SOFTWARE. 

NET-SNMP Copyright 1989, 1991, 1992 by Carnegie Mellon University. All rights reserved. 

Derivative Work - 1996, 1998-2000 Copyright 1996, 1998-2000 The Regents of the 
University of California. All rights reserved. 

Copyright (c) 2001-2003, Networks Associates Technology, Inc. All rights reserved. 

Portions of this code are copyright (c) 2001-2003, Cambridge Broadband Ltd. All rights 
reserved. 

Copyright 2003 Sxm Microsystems, Inc., 4150 Network Circle, Santa Clara, California 
95054, U.S.A. All rights reserved. 

This distribution may include materials developed by third parties. Sun, Sun 
Microsystems, the Sun logo and Solaris are trademarks or registered tiademarks of Sun 
Microsystems, Inc. in the U.S. and other countiies. 

Redistribution and use in source and binary forms, with or without modification, are 
permitted provided that the following conditions are met: 

Redistiibutions of source code must retain the above copyright notice, this list of 
conditions and the following disclaimer. 

Redistributions in binary form must reproduce the above copyright notice, this list of 
conditions and the following disclaimer in the docimientation and/ or other materials 
provided with the distiibution. 
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The name of the author may not be used to endorse or promote products derived from 
this software without specific prior written permission. 



THIS SOFTWARE IS PROVIDED "AS IS" AND ANY EXPRESS OR IMPLIED 

WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES 

OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE 9 

DISCLAIMED. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY DIRECT, o 

INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL 1 

DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF | 

SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR C 

BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF 5 
LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING 

NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS MM| 
SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. 



OpenSSH 



Portions Copyright 
reserved. 

Portions Copyright 

Portions Copyright 

Portions Copyright 

Portions Copyright 

Portions Copyright 

Portions Copyright 

Portions Copyright 

Portions Copyright 

Portions Copyright 

Portions Copyright 

Portions Copyright 

Portions Copyright 

Portions Copyright 

Portions Copyright 
California. All right 

Portions Copyright 



c) 1995 Tatu Ylonen (yIo@cs.hut.fi), Espoo, Finland. All rights 

c) 1999 Niels Provos. AH rights reserved. 

c) 2000, 2001, 2002 Markus Friedl. All rights reserved. 

c) 1995,1999 Theo de Raadt. AU rights reserved. 

c) 1999 Dug Song. AU rights reserved. 

c) 2002 Daniel KourU. AU rights reserved. 

c) 2000 Damien Miller. AU rights reserved. 

c) 2002 Chris Adams. All rights reserved. 

c) 2001 Per AUansson. All rights reserved. 

c) 1998 CORE SDI S.A., Buenos Aires, Argentina. 

c) 2001 Kevin Steves. All rights reserved. 

c) 2000 Andre Lucas. All rights reserved. 

c) 1998 Todd C. Miller portions Copyright (c) 1996 Jason Downs. 

c) 1999 Aaron Campbell. All rights reserved. 

c) 1983, 1990, 1992, 1993, 1995 The Regents of the University of 
reserved. 

c) 2002 NUs Nordman. All rights reserved. 



This distribution may include materials developed by third parties. Sun, Sun 
Microsystems, the Sxm logo and Solaris are trademarks or registered trademarks of Sun 
Microsystems, Inc. in the U.S. and other coimtries. 

Redistribution and use in source and binary forms, with or without modification, are 
permitted provided that the following conditions are met: 

Redistributions of source code must retain the above copyright notice, this list of 
conditions and the following disclaimer. 
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Redistributions in binary form, must reproduce the above copyright notice, this list of 
conditions and the following disclaimer in the doctmientation and/ or other materials 
provided with the distribution. 

The name of the author may not be used to endorse or promote products derived from 
this software without specific prior written permission. 

THIS SOFTWARE IS PROVIDED "AS IS" AND ANY EXPRESS OR IMPLIED 
WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES 
OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE 
DISCLAIMED. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY DIRECT, 
INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL 
DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF 
SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR 
BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF 
LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING 
NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS 
SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. 

This product includes software developed by the University of California, Berkeley and 
its contributors. 

ptmallOC Copyright (c) 2001 Wolfram Gloger. 

Permission to use, copy, modify, distribute, and sell this software and its 
documentation for any purpose is hereby granted without fee, provided that (i) the 
above copyright notices and this permission notice appear in all copies of the software 
and related documentation, and (ii) the name of Wolfram Gloger may not be used in 
any advertising or publicity relating to the software. 

THE SOFTWARE IS PROVIDED "AS-IS" AND WITHOUT WARRANTY OF ANY 
KIND, EXPRESS, IMPLIED OR OTHERWISE, INCLUDING WITHOUT LIMITATION, 
ANY WARRANTY OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR 
PURPOSE. 

IN NO EVENT SHALL WOLFRAM GLOGER BE LIABLE FOR ANY SPECIAL, 
INCIDENTAL, INDIRECT OR CONSEQUENTIAL DAMAGES OF ANY KIND, OR 
ANY DAMAGES WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR 
PROFITS, WHETHER OR NOT ADVISED OF THE POSSIBILITY OF DAMAGE, AND 
ON ANY THEORY OF LIABILITY, ARISING OUT OF OR IN CONNECTION WITH 
THE USE OR PERFORMANCE OF THIS SOFTWARE. 

Vixie-Cron copyright 1988,1990,1993,1994 by Paul Vixie. All rights reserved. 

Distribute freely, except: don't remove my name from the source or documentation 
(don't take credit for my work), mark your changes (don't get me blamed for your 
possible bugs), don't alter or remove this notice. May be sold if buildable source is 
provided to buyer. No warranty of any kind, express or implied, is included with this 
software; use at your own risk, responsibility for damages (if any) to anyone resulting 
from the use of this software rests entirely with the user. 

Zl LE Copyright (c) 1997-2001 Sandro Sigala. Copyright (c) 2003 Reuben Thomas. 

Redistribution and use in source and binary forms, with or without modification, are 
permitted provided that the following conditions are met: 
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Redistributions of source code must retain the above copyright notice, this list of 
conditions and the following disclaimer. 

Redistributions in binary form must reproduce the above copyright notice, this list of 
conditions and the following disclaimer in the documentation and /or other materials 
provided with the distribution. 

The name of the author may not be used to endorse or promote products derived from 
this software without specific prior written permission. 

THIS SOFTWARE IS PROVIDED "AS IS" AND ANY EXPRESS OR IMPLIED 
WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES 
OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE 
DISCLAIMED. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY DIRECT, 
INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL 
DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF 
SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR 
BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF 
LIABILITY, WHETHER IN CONTRACT, STRICT LLA.BILITY, OR TORT (INCLUDING 
NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS 
SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. 

BUSybOX, Linux Busybox Copyright (c) Eric Andersen; Linux Kernel Copyright (c) Linus Torvalds; 

KsmGl 3nd SSMTP sSMTP Copyright (c) Mark Ryan, Hugo Haas, Christoph Lameter, and Dave Collier- 
Brown. 

Busybox, Linux Kernel, and sSMTP are licensed under the GNU General Public 
License: 

GNU GENERAL PUBLIC LICENSE 
Version 2, Jxme 1991. 

Copyright (C) 1989, 1991 Free Software Foimdation, Inc. 59 Temple Place, Suite 330, 
Boston, MA 02111-1307 USA. 

Everyone is permitted to copy and distribute verbatim copies of this license document, 
but changing it is not allowed. 

Preamble 

The Ucenses for most software are designed to take away your freedom to share and 
change it. By contrast, the GNU General Public License is intended to guarantee your 
freedom to share and change free software— to make sure the software is free for all its 
users. This General Public License applies to most of the Free Software Foundation's 
software and to any other program whose authors commit to using it. (Some other Free 
Software Foundation software is covered by the GNU Library General Public License 
instead.) You can apply it to your programs, too. 

When we speak of free software, we are referring to freedom, not price. Our General 
Public Licenses are designed to make sure that you have the freedom to distribute 
copies of free software (and charge for this service if you wish), that you receive source 
code or can get it if you want it, that you can change the software or use pieces of it in 
new free programs; and that you know you can do these things. 

To protect your rights, we need to make restrictions that forbid anyone to deny you 
these rights or to ask you to surrender the rights. These restrictions translate to certain 
responsibilities for you if you distribute copies of the software, or if you modify it. 
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For example, if you distribute copies of such a program, whether gratis or for a fee, you 
must give the recipients all the rights that you have. You must make sure that they, too, 
receive or can get the source code. And you must show them these terms so they know 
their rights. 

We protect your rights with two steps: (1) copyright the software, and (2) offer you this 
license which gives you legal permission to copy, distribute and/or modify the 
software. 

Also, for each author's protection and ours, we want to make certain that everyone 
understands that there is no warranty for this free software. If the software is modified 
by someone else and passed on, we want its recipients to know that what they have is 
not the original, so that any problems introduced by others will not reflect on the 
original authors' reputations. 

Finally, any free program is threatened constantly by software patents. We wish to 
avoid the danger that redistributors of a free program will individually obtain patent 
licenses, in effect making the program proprietary. To prevent this, we have made it 
clear that any patent must be licensed for everyone's free use or not licensed at all. The 
precise terms and conditions for copying, distribution and modification follow. 

GNU GENERAL PUBLIC LICENSE 

TERMS AND CONDITIONS FOR COPYING, DISTRIBUTION AND MODIFICATION 

0. This License applies to any program or other work which contains a notice placed by 
the copyright holder saying it may be distributed under the terms of this General Public 
License. The "Program", below, refers to any such program or work, and a "work based 
on the Program" means either the Program or any derivative work under copyright 
law: that is to say, a work containing the Program or a portion of it, either verbatim or 
with modifications and/or translated into another language. (Hereinafter, translation 
is included without limitation in the term "modification".) Each licensee is addressed as 
"you". 

Activities other than copying, distribution and modification are not covered by this 
License; they are outside its scope. The act of running the Program is not restricted, and 
the output from the Program is covered only if its contents constitute a work based on 
the Program (independent of having been made by running the Program). Whether 
that is true depends on what the Program does. 

1. You may copy and distribute verbatim copies of the Program's source code as you 

receive it, in any medium, provided that you conspicuously and appropriately publish 
on each copy an appropriate copyright notice and disclaimer of warranty; keep intact 
all the notices that refer to this License and to the absence of any warranty; and give any 
other recipients of the Program a copy of this License along with the Program. 

You may charge a fee for the physical act of transferring a copy, and you may at your 
option offer warranty protection in exchange for a fee. 

2. You may modify your copy or copies of the Program or any portion of it, thus 
forming a work based on the Program, and copy and distribute such modifications or 
work under the terms of Section 1 above, provided that you also meet aU of these 

conditions: 

a) You must cause the modified files to carry prominent notices stating that you 
changed the files and the date of any change. 
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b) You must cause any work that you distribute or publish, that in whole or in part 
contains or is derived from the Program or any part thereof, to be licensed as a whole 
at no charge to all third parties vinder the terms of this License. 



c) If the modified program normally reads commands interactively when rim, you 
must cause it, when started running for such interactive use in the most ordinary way, 

to print or display an announcement including an appropriate copyright notice and a o 

notice that there is no warranty (or else, saying that you provide a warranty) and that ^ 

users may redistribute the program under these conditions, and telling the user how to S 

view a copy of this License. (Exception: if the Program itself is interactive but does not C 

normally print such an announcement, your work based on the Program is not required g 
to print an announcement.) ^^^fl. 

These requirements apply to the modified work as a whole. If identifiable sections of 
that work are not derived from the Program, and can be reasonably considered 
independent and separate works in themselves, then this License, and its terms, do not 
apply to those sections when you distribute them as separate works. But when you 
distribute the same sections as part of a whole which is a work based on the Program, 
the distribution of the whole must be on the terms of this License, whose permissions 
for other licensees extend to the entire whole, and thus to each and every part 
regardless of who wrote it. 

Thus, it is not the intent of this section to claim rights or contest your rights to work 

written entirely by you; rather, the intent is to exercise the right to control the 
distribution of derivative or collective works based on the Program. 

In addition, mere aggregation of another work not based on the Program with the 
Program (or with a work based on the Program) on a volume of a storage or 
distribution medium does not bring the other work under the scope of this License. 

3. You may copy and distribute the Program (or a work based on it, under Section 2) in 
object code or executable form under the terms of Sections 1 and 2 above provided that 
you also do one of the following: 

a) Accompany it with the complete corresponding machine-readable source code, 
which must be distributed under the terms of Sections 1 and 2 above on a medium 
customarily used for software interchange; or, 

b) Accompany it with a written offer, valid for at least three years, to give any third 
party, for a charge no more than your cost of physically performing source distribution, 
a complete machine-readable copy of the corresponding source code, to be distributed 
under the terms of Sections 1 and 2 above on a medium customarily used for software 

interchange; or, 

c) Accompany it with the information you received as to the offer to distribute 
corresponding source code. (This alternative is allowed only for noncommercial 
distribution and only if you received the program in object code or executable form 
with such an offer, in accord with Subsection b above.) 

The source code for a work means the preferred form of the work for making 
modifications to it. For an executable work, complete source code means all the source 
code for all modules it contains, plus any associated interface definition files, plus the 
scripts used to control compilation and installation of the executable. However, as a 
special exception, the source code distributed need not include anything that is 
normally distributed (in either source or binary form) with the major components 
(compiler, kernel, and so on) of the operating system on which the executable runs, 
imless that component itself accompanies the executable. 
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If distribution of executable or object code is made by offering access to copy from a 
designated place, then offering equivalent access to copy the source code from the same 
place counts as distribution of the source code, even though third parties are not 
compelled to copy the source along with the object code. 

4. You may not copy, modify, sublicense, or distribute the Program except as expressly 
provided under this License. Any attempt otherwise to copy, modify, sublicense or 
distribute the Program is void, and will automatically terminate your rights under this 
License. However, parties who have received copies, or rights, from you under this 
License will not have their licenses terminated so long as such parties remain in fuU 
compliance. 

5. You are not required to accept this License, since you have not signed it. However, 
nothing else grants you permission to modify or distribute the Program or its 
derivative works. These actions are prohibited by law if you do not accept this License. 
Therefore, by modifying or distributing the Program (or any work based on the 
Program), you indicate your acceptance of this License to do so, and all its terms and 
conditions for copying, distributing or modifying the Program or works based on it. 

6. Each time you redistribute the Program (or any work based on the Program), the 
recipient automatically receives a license from the original licensor to copy, distribute 
or modify the Program subject to these terms and conditions. You may not impose any 
further restrictions on the recipients' exercise of the rights granted herein. You are not 
responsible for enforcing compliance by third parties to this License. 

7. If, as a consequence of a court judgment or allegation of patent infringement or for 
any other reason (not limited to patent issues), conditions are imposed on you (whether 
by court order, agreement or otherwise) that contradict the conditions of this License, 
they do not excuse you from the conditions of this License. If you cannot distribute so 
as to satisfy simultaneously your obligations under this License and any other pertinent 
obligations, then as a consequence you may not distribute the Program at all. For 
example, if a patent license would not permit royalty-free redistribution of the Program 
by all those who receive copies directly or indirectly through you, then the only way 
you could satisfy both it and this License would be to refrain entirely from distribution 
of the Program. 

If any portion of this section is held invalid or imenforceable under any particular 
circumstance, the balance of the section is intended to apply and the section as a whole 
is intended to apply in other circumstances. 

It is not the purpose of this section to induce you to infringe any patents or other 

property right claims or to contest validity of any such claims; this section has the sole 
purpose of protecting the integrity of the free software distribution system, which is 
implemented by public license practices. Many people have made generous 
contributions to the wide range of software distributed through that system in reliance 
on consistent application of that system; it is up to the author/donor to decide If he or 
she is willing to distribute software through any other system and a licensee cannot 
impose that choice. 

This section is intended to make thoroughly clear what is believed to be a consequence 
of the rest of this License. 

8. If the distribution and/ or use of the Program is restricted in certain countries either 
by patents or by copyrighted interfaces, the original copyright holder who places the 
Program imder this License may add an explicit geographical distribution limitation 
excluding those countries, so that distribution is permitted only in or among countries 
not thus excluded. In such case, this License incorporates the limitation as if written in 
the body of this License. 
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9. The Free Software Foundation may publish revised and/ or new versions of the 
General Public License from, time to time. Such new versions will be similar in spirit to 
the present version, but may differ in detail to address new problems or concerns. 

Each version is given a distinguishing version number. If the Program specifies a 

version number of this License which applies to it and "any later version", you have the 

option of following the terms and conditions either of that version or of any later o 

version published by the Free Software Foundation. If the Program does not specify a ^ 

version number of this License, you may choose any version ever published by the Free S 

Software Foundation. C 

o 
m 
S 

10. If you wish to incorporate parts of the Program into other free programs whose 
distribution conditions are different, write to the author to ask for permission. For 
software which is copyrighted by the Free Software Foundation, write to the Free 
Software Foundation; we sometimes make exceptions for this. Our decision wiU be 
guided by the two goals of preserving the free status of all derivatives of our free 
software and of promoting the sharing and reuse of software generally. 



NO WARRANTY 



11. BECAUSE THE PROGRAM IS LICENSED FREE OF CHARGE, THERE IS NO 
WARRANTY FOR THE PROGRAM, TO THE EXTENT PERMITTED BY APPLICABLE 
LAW. EXCEPT WHEN OTHERWISE STATED IN WRITING THE COPYRIGHT 
HOLDERS AND/OR OTHER PARTIES PROVIDE THE PROGRAM "AS IS" 
WITHOUT WARRANTY OF ANY KIND, EITHER EXPRESSED OR IMPLIED, 
INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF 
MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE. THE ENTIRE 
RISK AS TO THE QUALITY AND PERFORMANCE OF THE PROGRAM IS WITH 
YOU. SHOULD THE PROGRAM PROVE DEFECTIVE, YOU ASSUME THE COST OF 
ALL NECESSARY SERVICING, REPAIR OR CORRECTION. 

12. IN NO EVENT UNLESS REQUIRED BY APPLICABLE LAW OR AGREED TO IN 
WRITING WILL ANY COPYRIGHT HOLDER, OR ANY OTHER PARTY WHO MAY 
MODIFY AND/OR REDISTRIBUTE THE PROGRAM AS PERMITTED ABOVE, BE 
LIABLE TO YOU FOR DAMAGES, INCLUDING ANY GENERAL, SPECIAL, 
INCIDENTAL OR CONSEQUENTIAL DAMAGES ARISING OUT OF THE USE OR 
INABILITY TO USE THE PROGRAM (INCLUDING BUT NOT LIMITED TO LOSS OF 
DATA OR DATA BEING RENDERED INACCURATE OR LOSSES SUSTAINED BY 
YOU OR THIRD PARTIES OR A FAILURE OF THE PROGRAM TO OPERATE WITH 
ANY OTHER PROGRAMS), EVEN IF SUCH HOLDER OR OTHER PARTY HAS 
BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES. END OF TERMS AND 
CONDITIONS 



Software Libraries Certain libraries were used in the development of this software, licensed imder GNU 

Lesser General Public License. For a list of libraries and source material (where 
required), see the HP technical support site at 
http://www.HP.com. 

GNU LESSER GENERAL PUBLIC LICENSE 
Version 2.1, February 1999. 

Copyright (C) 1991, 1999 Free Software Formdation, Inc., 59 Temple Place, Suite 330, 
Boston, MA 02111-1307 USA. 

Everyone is permitted to copy and distribute verbatim copies of this license document, 
but changing it is not allowed. 
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[This is the first released version of the Lesser GPL. It also counts as the successor of the 
GNU Library PubUc License, version 2, hence the version number 2.1.] 

Preamble 

The licenses for most software are designed to take away your freedom to share and 
change it. By contrast, the GNU General Public Licenses are intended to guarantee your 
freedom to share and change free software— to make sure the software is free for all its 
users. 

This license, the Lesser General Public License, applies to some specially designated 
software packages— typically libraries— of the Free Software Foundation and other 
authors who decide to use it. You can use it too, but we suggest you first think carefully 
about whether this license or the ordinary General Public License is the better strategy 
to use in any particular case, based on the explanations below. 

When we speak of free software, we are referring to freedom of use, not price. Our 
General Public Licenses are designed to make sure that you have the freedom to 
distribute copies of free software (and charge for this service if you wish); that you 
receive source code or can get it if you want it; that you can change the software and 
use pieces of it in new free programs; and that you are informed that you can do these 
things. 

To protect your rights, we need to make restrictions that forbid distributors to deny you 
these rights or to ask you to surrender these rights. These restrictions translate to certain 
responsibilities for you if you distribute copies of the library or if you modify it. 

For example, if you distribute copies of the library, whether gratis or for a fee, you must 

give the recipients all the rights that we gave you. You must make sure that they, too, 
receive or can get the source code. If you link other code with the library, you must 
provide complete object files to the recipients, so that they can relink them with the 
Ubrary after making changes to the library and recompiling it. And you must show 
them these terms so they know their rights. 

We protect your rights with a two-step method: (1) we copyright the library, and (2) we 
offer you this license, which gives you legal permission to copy, distribute and/ or 
modify the library. 

To protect each distributor, we want to make it very clear that there is no warranty for 
the free library. Also, if the library is modified by someone else and passed on, the 
recipients should know that what they have is not the original version, so that the 
original author's reputation will not be affected by problems that might be introduced 
by others. 

Finally, software patents pose a constant threat to the existence of any free program. We 
wish to make sure that a company cannot effectively restrict the users of a free program 
by obtaining a restrictive license from a patent holder. Therefore, we insist that any 
patent license obtained for a version of the library must be consistent with the full 
freedom of use specified in this license. 

Most GNU software, including some libraries, is covered by the ordinary GNU General 
Public License. This license, the GNU Lesser General Public License, applies to certain 
designated libraries, and is quite different from the ordinary General PubUc License. 
We use this license for certain libraries in order to permit linking those libraries into 
non-free programs. 
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When a program, is linked with a library, whether statically or using a shared library, 
the combination of the two is legally speaking a combined work, a derivative of the 
original library. The ordinary General Public License therefore permits such linking 
only if the entire combination fits its criteria of freedom. The Lesser General Public 
License permits more lax criteria for linking other code with the Ubrary. 

We call this license the "Lesser" General Public License because it does Less to protect 
the user's freedom than the ordinary General Public License. It also provides other free 
software developers Less of an advantage over competing non-free programs. These 
disadvantages are the reason we use the ordinary General Public License for many 
libraries. However, the Lesser license provides advantages in certain special 
circumstances. 

For example, on rare occasions, there may be a special need to encourage the widest 
possible use of a certain library, so that it becomes a de-facto standard. To achieve this, 
non-free programs must be allowed to use the library. A more frequent case is that a 
free library does the same job as widely used non-free libraries. In this case, there is 
little to gain by limiting the free library to free software only, so we use the Lesser 
General Public License. 

In other cases, permission to use a particular library in non-free programs enables a 
greater number of people to use a large body of free software. For example, permission 
to use the GNU C Library in non-free programs enables many more people to use the 
whole GNU operating system, as well as its variant, the GNU/Linux operating system. 

Although the Lesser General Public License is Less protective of the users' freedom, it 
does ensure that the user of a program that is linked with the Library has the freedom 
and the wherewithal to run that program using a modified version of the Library. 

The precise terms and conditions for copying, distribution and modification follow. 
Pay close attention to the difference between a "work based on the library" and a "work 
that uses the library". The former contains code derived from the library, whereas the 
latter must be combined with the library in order to run. 

GNU LESSER GENERAL PUBLIC LICENSE 

TERMS AND CONDITIONS FOR COPYING, DISTRIBUTION AND MODIFICATION 

0. This License Agreement applies to any software library or other program which 
contains a notice placed by the copyright holder or other authorized party saying it 
may be distributed under the terms of this Lesser General Public License (also called 
"this License"). Each licensee is addressed as "you". 

A "library" means a collection of software functions and/ or data prepared so as to be 
conveniently linked with application programs (which use some of those functions and 
data) to form executables. 

The "Library", below, refers to any such software library or work which has been 
distributed under these terms. A "work based on the Library" means either the Library 
or any derivative work under copyright law: that is to say, a work containing the 
Library or a portion of it, either verbatim or with modifications and/ or translated 
straightforwardly into another language. (Hereinafter, translation is included without 
limitation in the term "modification".) 

"Source code" for a work means the preferred form of the work for making 
modifications to it. For a library, complete source code means all the source code for all 
modules it contains, plus any associated interface definition files, plus the scripts used 
to control compilation and installation of the library. 
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Activities other than copying, distribution and modification are not covered by this 
License; they are outside its scope. The act of running a program using the Library is 
not restricted, and output from such a program is covered only if its contents constitute 
a work based on the Library (independent of the use of the Library in a tool for writing 
it). Whether that is true depends on what the Library does and what the program that 
uses the Library does. 

1. You may copy and distribute verbatim copies of the Library's complete source code 
as you receive it, in any medium, provided that you conspicuously and appropriately 
publish on each copy an appropriate copyright notice and disclaimer of warranty; keep 
intact all the notices that refer to this License and to the absence of any warranty; and 
distribute a copy of this License along with the Library. 

You may charge a fee for the physical act of transferring a copy, and you may at your 
option offer warranty protection in exchange for a fee. 

2. You may modify your copy or copies of the Library or any portion of it, thus forming 
a work based on the Library, and copy and distribute such modifications or work imder 
the terms of Section 1 above, provided that you also meet all of these conditions: 

a) The modified work must itself be a software library. 

b) You must cause the files modified to carry prominent notices stating that you 
changed the files and the date of any change. 

c) You must cause the whole of the work to be licensed at no charge to all third parties 
under the terms of this License. 

d) If a facility in the modified Library refers to a function or a table of data to be 
supplied by an application program that uses the facility, other than as an argument 
passed when the facility is invoked, then you must make a good faith effort to ensure 
that, in the event an application does not supply such function or table, the facility still 
operates, and performs whatever part of its purpose remains meaningful. 

(For example, a function in a library to compute square roots has a purpose that is 
entirely well-defined independent of the application. Therefore, Subsection 2d requires 
that any application-supplied function or table used by this function must be optional: 
if the application does not supply it, the square root ftmction must still compute square 
roots.) 

These requirements apply to the modified work as a whole. If identifiable sections of 
that work are not derived from the Library, and can be reasonably considered 
independent and separate works in themselves, then this License, and its terms, do not 
apply to those sections when you distribute them as separate works. But when you 
distribute the same sections as part of a whole which is a work based on the Library, 
the distribution of the whole must be on the terms of this License, whose permissions 
for other licensees extend to the entire whole, and thus to each and every part 
regardless of who wrote it. 

Thus, it is not the intent of this section to claim rights or contest your rights to work 
written entirely by you; rather, the intent is to exercise the right to control the 
distribution of derivative or collective works based on the Library. 

In addition, mere aggregation of another work not based on the Library with the 
Library (or with a work based on the Library) on a volume of a storage or distribution 
medium does not bring the other work imder the scope of this License. 
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3. You may opt to apply the terms of the ordinary GNU General Public License instead 
of this License to a given copy of the Library. To do this, you must alter all the notices 
that refer to this License, so that they refer to the ordinary GNU General Public License, 

version 2, instead of to this License. (If a newer version than version 2 of the ordinary 

GNU General Public License has appeared, then you can specify that version instead if 
you wish.) Do not make any other change in these notices. 9 

o 

Once this change is made in a given copy, it is irreversible for that copy, so the ordinary ^ 
GNU General Public License applies to all subsequent copies and derivative works S 
made from that copy. C 

m 
S 

This option is useful when you wish to copy part of the code of the Library into a 
program that is not a library. 

4. You may copy and distribute the Library (or a portion or derivative of it, under 
Section 2) in object code or executable form under the terms of Sections 1 and 2 above 
provided that you accompany it with the complete corresponding machine-readable 
source code, which must be distributed under the terms of Sections 1 and 2 above on a 
medium customarily used for software interchange. 

If distribution of object code is made by offering access to copy from a designated place, 
then offering equivalent access to copy the source code from the same place satisfies the 
requirement to distribute the source code, even though third parties are not compelled 
to copy the source along with the object code. 

5. A program that contains no derivative of any portion of the Library, but is designed 
to work with the Library by being compiled or linked with it, is called a "work that uses 
the Library". Such a work, in isolation, is not a derivative work of the Library, and 
therefore falls outside the scope of this License. 

However, linking a "work that uses the Library" with the Library creates an executable 
that is a derivative of the Library (because it contains portions of the Library), rather 
than a "work that uses the Ubrary". The executable is therefore covered by this License. 
Section 6 states terms for distribution of such executables. 



When a "work that uses the Library" uses material from a header file that is part of the 
Library, the object code for the work may be a derivative work of the Library even 
though the source code is not. Whether this is true is especially significant if the work 
can be linked without the Library, or if the work is itself a Ubrary. The threshold for this 
to be true is not precisely defined by law. 

If such an object file uses only numerical parameters, data structure layouts and 
accessors, and small macros and small inline functions (ten lines or less in length), then 
the use of the object file is unrestricted, regardless of whether it is legally a derivative 
work. (Executables containing this object code plus portions of the Library will still fall 
imder Section 6.) 

Otherwise, if the work is a derivative of the Library, you may distribute the object code 
for the work imder the terms of Section 6. Any executables containing that work also 
fall under Section 6, whether or not they are linked directly with the Library itself. 

6. As an exception to the Sections above, you may also combine or link a "work that uses 
the Library" with the Library to produce a work containing portions of the Library, and 
distribute that work under terms of your choice, provided that the terms permit 
modification of the work for the customer's own use and reverse engineering for 
debugging such modifications. 
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You must give prominent notice with each copy of the work that the Library is used in 
it and that the Library and its use are covered by this License. You must supply a copy 
of this License. If the work during execution displays copyright notices, you must 
include the copyright notice for the Library among them, as well as a reference 
directing the user to the copy of this License. Also, you must do one of these things: 

a) Accompany the work with the complete corresponding machine-readable source 
code for the Library including whatever changes were used in the work (which must 
be distributed under 

Sections 1 and 2 above); and, if the work is an executable linked with the Library, with 
the complete machine-readable "work that uses the Library", as object code and/or 
source code, so that the user can modify the Library and then relink to produce a 
modified executable containing the modified Library. (It is understood that the user 
who changes the contents of definitions files in the Library will not necessarily be able 
to recompile the application to use the modified definitions.) 

b) Use a suitable shared library mechanism for linking with the Library. A suitable 
mechanism is one that (1) uses at rvm time a copy of the library already present on the 
user's computer system, rather than copying library functions into the executable, and 
(2) will operate properly with a modified version of the library, if the user installs one, 
as long as the modified version is interface-compatible with the version that the work 
was made with. 

c) Accompany the work with a written offer, valid for at least three years, to give the 
same user the materials specified in Subsection 6a, above, for a charge no more than the 
cost of performing this distribution. 

d) If distribution of the work is made by offering access to copy from a designated 
place, offer equivalent access to copy the above specified materials from the same place. 

e) Verify that the user has already received a copy of these materials or that you have 
already sent this user a copy. 

For an executable, the required form of the "work that uses the Library" must include 
any data and utUity programs needed for reproducing the executable from it. However, 
as a special exception, the materials to be distributed need not include anything that is 
normally distiibuted (in either source or binary form) with the major components 
(compiler, kernel, and so on) of the operating system o which the executable rims, 
unless that component itself accompanies the executable. 

It may happen that this requirement contradicts the license restrictions of other 
proprietary libraries that do not normally accompany the operating system. Such a 
contradiction means you cannot use both them and the Library together in an 
executable that you distribute. 

7. You may place library facilities that are a work based on the Library side-by-side in 
a single library together with other library facilities not covered by this License, and 
distribute such a combined library, provided that the separate distribution of the work 
based on the Library and of the other library facilities is otherwise permitted, and 
provided that you do these two things: 

a) Accompany the combined library with a copy of the same work based on the 
Library, uncombined with any other library facilities. This must be distributed under 
the terms of the Sections above. 

b) Give prominent notice with the combined library of the fact that part of it is a work 
based on the Library, and explaining where to find the accompanying uncombined 
form of the same work. 
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8. You may not copy, modify, sublicense, link with, or distribute the Library except as 
expressly provided under this License. Any attempt otherwise to copy, modify, 
sublicense, link with, or distribute the Library is void, and will automatically terminate 
your rights under this License. However, parties who have received copies, or rights, 
from you under this License will not have their licenses terminated so long as such 
parties remain in fuE compliance. 

9. You are not required to accept this License, since you have not signed it. However, 
nothing else grants you permission to modify or distribute the Library or its derivative 
works. These actions are prohibited by law if you do not accept this License. Therefore, 
by modifying or distributing the Library (or any work based on the Library), you 
indicate your acceptance of this License to do so, and all its terms and conditions for 
copying, distributing or modifying the Library or works based on it. 

10. Each time you redistribute the Library (or any work based on the Library), the 

recipient automatically receives a license from the original licensor to copy, distribute, 
link with or modify the Library subject to these terms and conditions. You may not 
impose any further restrictions on the recipients' exercise of the rights granted herein. 
You are not responsible for enforcing compliance by third parties with this License. 

11. If, as a consequence of a court judgment or allegation of patent infringement or for 
any other reason (not limited to patent issues), conditions are imposed on you (whether 
by court order, agreement or otherwise) that contradict the conditions of this License, 
they do not excuse you from the conditions of this License. If you cannot distribute so 
as to satisfy simultaneously your obligations under this License and any other pertinent 
obligations, then as a consequence you may not distribute the Library at all. For 
example, if a patent license would not permit royalty-free redistribution of the Library 
by all those who receive copies directly or indirectly through you, then the only way 
you could satisfy both it and this License would be to refrain entirely from distribution 
of the Library. 

If any portion of this section is held invalid or unenforceable imder any particular 
circumstance, the balance of the section is intended to apply, and the section as a whole 
is intended to apply in other circumstances. 

It is not the purpose of this section to induce you to infringe any patents or other 
property right claims or to contest validity of any such claims; this section has the sole 
purpose of protecting the integrity of the free software distribution system which is 
implemented by public license practices. Many people have made generous 
contributions to the wide range of software distributed through that system in reliance 
on consistent application of that system; it is up to the author/donor to decide if he or 
she is willing to distribute software through any other system and a licensee cannot 
impose that choice. 

This section is intended to make thoroughly clear what is believed to be a consequence 
of the rest of this License. 

12. If the distribution and/or use of the Library is restricted in certain countries either 
by patents or by copyrighted interfaces, the original copyright holder who places the 
Library imder this License may add an explicit geographical distribution limitation 
excluding those countries, so that distribution is permitted only in or among countries 
not thus excluded. In such case, this License incorporates the limitation as if written in 
the body of this License. 

13. The Free Software Foundation may publish revised and/ or new versions of the 
Lesser General Public License from time to time. Such new versions will be similar in 
spirit to the present version, but may differ in detail to address new problems or 
concerns. 
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Each version is given a distinguishing version number. If the Library specifies a version 
number of this License v^^hich applies to it and "any later version", you have the option 
of following the terms and conditions either of that version or of any later version 
published by the Free Software Foundation. If the Library does not specify a license 
version number, you may choose any version ever published by the Free Software 
Foundation. 

14. If you wish to incorporate parts of the Library into other free programs whose 
distribution conditions are incompatible with these, write to the author to ask for 
permission. For software which is copyrighted by the Free Software Foundation, write 
to the Free Software Foundation; we sometimes make exceptions for this. Our decision 
will be guided by the two goals of preserving the free status of all derivatives of our free 
software and of promoting the sharing and reuse of software generally. 

NO WARRANTY 

15. BECAUSE THE LIBRARY IS LICENSED FREE OF CHARGE, THERE IS NO 
WARRANTY FOR THE LIBRARY, TO THE EXTENT PERMITTED BY APPLICABLE 
LAW. EXCEPT WHEN OTHERWISE STATED IN WRITING THE COPYRIGHT 
HOLDERS AND/OR OTHER PARTIES PROVIDE THE LIBRARY "AS IS" WITHOUT 
WARRANTY OF ANY KIND, EITHER EXPRESSED OR IMPLIED, INCLUDING, BUT 
NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND 
FITNESS FOR A PARTICULAR PURPOSE. THE ENTIRE RISK AS TO THE QUALITY 
AND PERFORMANCE OF THE LIBRARY IS WITH YOU. SHOULD THE LIBRARY 
PROVE DEFECTIVE, YOU ASSUME THE COST OF ALL NECESSARY SERVICING, 
REPAIR OR CORRECTION. 

16. IN NO EVENT UNLESS REQUIRED BY APPLICABLE LAW OR AGREED TO IN 
WRITING WILL ANY COPYRIGHT HOLDER, OR ANY OTHER PARTY WHO MAY 
MODIFY AND /OR REDISTRIBUTE THE LIBRARY AS PERMITTED ABOVE, BE 
LIABLE TO YOU FOR DAMAGES, INCLUDING ANY GENERAL, SPECIAL, 
INCIDENTAL OR CONSEQUENTIAL DAMAGES ARISING OUT OF THE USE OR 
INABILITY TO USE THE LIBRARY (INCLUDING BUT NOT LIMITED TO LOSS OF 
DATA OR DATA BEING RENDERED INACCURATE OR LOSSES SUSTAINED BY 
YOU OR THIRD PARTIES OR A FAILURE OF THE LIBRARY TO OPERATE WITH 
ANY OTHER SOFTWARE), EVEN IF SUCH HOLDER OR OTHER PARTY HAS BEEN 
ADVISED OF THE POSSIBILITY OF SUCH DAMAGES. 

END OF TERMS AND CONDITIONS. 
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Bandwidth. The upper hmit on the amount of data, typically in kilobits per 
second (kbps), that can pass through a network connection. Greater 
bandwidth indicates faster data transfer capability. 

CIFS. Common Internet File System. CIFS is the remote file system access 
protocol used by Windows servers and clients to share files across the 
network. 

DHCP. Dynamic Host Configuration Protocol. Software that automatically 
assigns IP addresses to client stations logging onto a TCP/IP network. 

Domain. In the Internet, a portion of the Domain Name Service (DNS) that 
refers to groupings of networks based on the type of organization or 

geography. 

DNS. Domain Name Service. System used in the Internet for translating 
names of network nodes into IP addresses. A Domain Name Server notifies 
hosts of other host IP addresses, associating host names with IP addresses. 

Ethernet. The most widely used Local Area Network (LAN) access method. 

Host. A computer or other computing device that resides on a network. 

Host address. The IP address assigned to each computer attached to the 
network. 

Host name. Name given to a computer, usually by DNS. 

HTTP. Hj^erText Transport Protocol. The protocol used by Web browsers to 
commimicate with Web servers. 

HTTPS. Hyper Text Transport Protocol Secure.The protocol for accessing a 
secure Web server. Using HTTPS directs the message to a secure port number 
to be managed by a security protocol. 

IP. Internet protocol. Network layer protocol in the TCP/IP stack that enables 
a connectionless internetwork service. 
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IP address. In IP version 4 (IPv4), a 32-bit address assigned to hosts using the 
IP protocol. Also called an Internet address. 

Netmask. A 32-bit mask which shows how an Internet address is divided into 
network, subnet, and host parts. The netmask has ones in the bit positions in 
the 32-bit address which are used for the network and subnet parts, and zeros 
for the host part. The mask must contain at least the standard network portion 
(as determined by the class of the address), and the subnet field should be 
contiguous with the network portion. 

NFS. Network File System. The file sharing protocol in a UNIX network. 

SNMP. Simple Network Management Protocol. A widely used network 
monitoring and control protocol. Data is passed from SNMP agents, which are 
hardware or software processes reporting activity in each network device 
(hub, router, bridge, and so forth) to the workstation console used to oversee 
the network. 

TCP. Transmission Control Protocol. The error correcting Transport layer 
(Layer 4) in the TCP/IP protocol suite. 

TCP/IP. Transmission Control Protocol /Internet Protocol. The protocol suite 
used in the Internet, intranets, and extranets. 
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